--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-06T20:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:02:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:02:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8"} {"level":"info","ts":"2026-07-06T20:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8"} {"level":"debug","ts":"2026-07-06T20:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:02:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:02:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:02:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:02:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8"} {"level":"debug","ts":"2026-07-06T20:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8"} {"level":"debug","ts":"2026-07-06T20:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:02:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:02:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:02:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:02:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8"} {"level":"debug","ts":"2026-07-06T20:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8"} {"level":"debug","ts":"2026-07-06T20:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:02:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:02:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:02:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:02:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8"} {"level":"debug","ts":"2026-07-06T20:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8"} {"level":"debug","ts":"2026-07-06T20:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:02:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:02:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:02:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:02:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8"} {"level":"debug","ts":"2026-07-06T20:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8"} {"level":"debug","ts":"2026-07-06T20:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:02:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:02:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8"} {"level":"info","ts":"2026-07-06T20:02:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf5bd1296356bef8e41cc2fc25fb4167dcfcdaae4ebe66eab8c6a65040c7e86a"} {"level":"info","ts":"2026-07-06T20:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ccc2e9b3ffbbb822a0decf8523d6ab8aab661cfb0ccff3a5911bf6918e96d86a"} {"level":"info","ts":"2026-07-06T20:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9dc625a657cc34d87df096a3ac417f694d831ec6504d3f2ad597440f7527bca8"} {"level":"info","ts":"2026-07-06T20:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f434e2d16aab3fa0f6c0254272bf9e6d27b30a35d018d8aa56d404690a655e5"} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129"} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129"} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129"} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"252f14c84d5724ce9823ff48cb17375b2cac8327b4fdc985205194c6cdcd40c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"252f14c84d5724ce9823ff48cb17375b2cac8327b4fdc985205194c6cdcd40c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"252f14c84d5724ce9823ff48cb17375b2cac8327b4fdc985205194c6cdcd40c2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/252f14c84d5724ce9823ff48cb17375b2cac8327b4fdc985205194c6cdcd40c2"} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"252f14c84d5724ce9823ff48cb17375b2cac8327b4fdc985205194c6cdcd40c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/252f14c84d5724ce9823ff48cb17375b2cac8327b4fdc985205194c6cdcd40c2"} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"252f14c84d5724ce9823ff48cb17375b2cac8327b4fdc985205194c6cdcd40c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["252f14c84d5724ce9823ff48cb17375b2cac8327b4fdc985205194c6cdcd40c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"252f14c84d5724ce9823ff48cb17375b2cac8327b4fdc985205194c6cdcd40c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129"} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"252f14c84d5724ce9823ff48cb17375b2cac8327b4fdc985205194c6cdcd40c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/252f14c84d5724ce9823ff48cb17375b2cac8327b4fdc985205194c6cdcd40c2"} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"252f14c84d5724ce9823ff48cb17375b2cac8327b4fdc985205194c6cdcd40c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"252f14c84d5724ce9823ff48cb17375b2cac8327b4fdc985205194c6cdcd40c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["252f14c84d5724ce9823ff48cb17375b2cac8327b4fdc985205194c6cdcd40c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129"} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"252f14c84d5724ce9823ff48cb17375b2cac8327b4fdc985205194c6cdcd40c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"252f14c84d5724ce9823ff48cb17375b2cac8327b4fdc985205194c6cdcd40c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/252f14c84d5724ce9823ff48cb17375b2cac8327b4fdc985205194c6cdcd40c2"} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"252f14c84d5724ce9823ff48cb17375b2cac8327b4fdc985205194c6cdcd40c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129"} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"252f14c84d5724ce9823ff48cb17375b2cac8327b4fdc985205194c6cdcd40c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/252f14c84d5724ce9823ff48cb17375b2cac8327b4fdc985205194c6cdcd40c2"} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"252f14c84d5724ce9823ff48cb17375b2cac8327b4fdc985205194c6cdcd40c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["252f14c84d5724ce9823ff48cb17375b2cac8327b4fdc985205194c6cdcd40c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"252f14c84d5724ce9823ff48cb17375b2cac8327b4fdc985205194c6cdcd40c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129"} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"252f14c84d5724ce9823ff48cb17375b2cac8327b4fdc985205194c6cdcd40c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/252f14c84d5724ce9823ff48cb17375b2cac8327b4fdc985205194c6cdcd40c2"} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"252f14c84d5724ce9823ff48cb17375b2cac8327b4fdc985205194c6cdcd40c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"252f14c84d5724ce9823ff48cb17375b2cac8327b4fdc985205194c6cdcd40c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["252f14c84d5724ce9823ff48cb17375b2cac8327b4fdc985205194c6cdcd40c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129"} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"252f14c84d5724ce9823ff48cb17375b2cac8327b4fdc985205194c6cdcd40c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/252f14c84d5724ce9823ff48cb17375b2cac8327b4fdc985205194c6cdcd40c2"} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"252f14c84d5724ce9823ff48cb17375b2cac8327b4fdc985205194c6cdcd40c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/252f14c84d5724ce9823ff48cb17375b2cac8327b4fdc985205194c6cdcd40c2"} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"252f14c84d5724ce9823ff48cb17375b2cac8327b4fdc985205194c6cdcd40c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"252f14c84d5724ce9823ff48cb17375b2cac8327b4fdc985205194c6cdcd40c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["252f14c84d5724ce9823ff48cb17375b2cac8327b4fdc985205194c6cdcd40c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129"} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"252f14c84d5724ce9823ff48cb17375b2cac8327b4fdc985205194c6cdcd40c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca0dae68b105c77c6f296c772c69173ff9d09be44eafb8e0d69212bb214b7c3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/252f14c84d5724ce9823ff48cb17375b2cac8327b4fdc985205194c6cdcd40c2"} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca0dae68b105c77c6f296c772c69173ff9d09be44eafb8e0d69212bb214b7c3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca0dae68b105c77c6f296c772c69173ff9d09be44eafb8e0d69212bb214b7c3e"} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"252f14c84d5724ce9823ff48cb17375b2cac8327b4fdc985205194c6cdcd40c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca0dae68b105c77c6f296c772c69173ff9d09be44eafb8e0d69212bb214b7c3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca0dae68b105c77c6f296c772c69173ff9d09be44eafb8e0d69212bb214b7c3e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca0dae68b105c77c6f296c772c69173ff9d09be44eafb8e0d69212bb214b7c3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129"} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca0dae68b105c77c6f296c772c69173ff9d09be44eafb8e0d69212bb214b7c3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/252f14c84d5724ce9823ff48cb17375b2cac8327b4fdc985205194c6cdcd40c2"} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca0dae68b105c77c6f296c772c69173ff9d09be44eafb8e0d69212bb214b7c3e"} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129"} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901"} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129"} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901"} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129"} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901"} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14b8e21143f9fb6cd4dce81d93b6f0c78c1003ad16e46aa279d461424886ee39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14b8e21143f9fb6cd4dce81d93b6f0c78c1003ad16e46aa279d461424886ee39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14b8e21143f9fb6cd4dce81d93b6f0c78c1003ad16e46aa279d461424886ee39","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901"} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14b8e21143f9fb6cd4dce81d93b6f0c78c1003ad16e46aa279d461424886ee39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14b8e21143f9fb6cd4dce81d93b6f0c78c1003ad16e46aa279d461424886ee39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14b8e21143f9fb6cd4dce81d93b6f0c78c1003ad16e46aa279d461424886ee39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14b8e21143f9fb6cd4dce81d93b6f0c78c1003ad16e46aa279d461424886ee39"} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901"} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14b8e21143f9fb6cd4dce81d93b6f0c78c1003ad16e46aa279d461424886ee39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14b8e21143f9fb6cd4dce81d93b6f0c78c1003ad16e46aa279d461424886ee39"} {"level":"error","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901"} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901"} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14b8e21143f9fb6cd4dce81d93b6f0c78c1003ad16e46aa279d461424886ee39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14b8e21143f9fb6cd4dce81d93b6f0c78c1003ad16e46aa279d461424886ee39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14b8e21143f9fb6cd4dce81d93b6f0c78c1003ad16e46aa279d461424886ee39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901"} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14b8e21143f9fb6cd4dce81d93b6f0c78c1003ad16e46aa279d461424886ee39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14b8e21143f9fb6cd4dce81d93b6f0c78c1003ad16e46aa279d461424886ee39"} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14b8e21143f9fb6cd4dce81d93b6f0c78c1003ad16e46aa279d461424886ee39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"259865292e5db84dd65dcc3e272ee2cb4cc8365358b87863b6b50c4ec75a78ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"259865292e5db84dd65dcc3e272ee2cb4cc8365358b87863b6b50c4ec75a78ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14b8e21143f9fb6cd4dce81d93b6f0c78c1003ad16e46aa279d461424886ee39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14b8e21143f9fb6cd4dce81d93b6f0c78c1003ad16e46aa279d461424886ee39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901"} {"level":"info","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14b8e21143f9fb6cd4dce81d93b6f0c78c1003ad16e46aa279d461424886ee39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/259865292e5db84dd65dcc3e272ee2cb4cc8365358b87863b6b50c4ec75a78ad"} {"level":"info","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"259865292e5db84dd65dcc3e272ee2cb4cc8365358b87863b6b50c4ec75a78ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["259865292e5db84dd65dcc3e272ee2cb4cc8365358b87863b6b50c4ec75a78ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"259865292e5db84dd65dcc3e272ee2cb4cc8365358b87863b6b50c4ec75a78ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14b8e21143f9fb6cd4dce81d93b6f0c78c1003ad16e46aa279d461424886ee39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14b8e21143f9fb6cd4dce81d93b6f0c78c1003ad16e46aa279d461424886ee39"} {"level":"info","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901"} {"level":"info","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14b8e21143f9fb6cd4dce81d93b6f0c78c1003ad16e46aa279d461424886ee39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"259865292e5db84dd65dcc3e272ee2cb4cc8365358b87863b6b50c4ec75a78ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/259865292e5db84dd65dcc3e272ee2cb4cc8365358b87863b6b50c4ec75a78ad"} {"level":"info","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14b8e21143f9fb6cd4dce81d93b6f0c78c1003ad16e46aa279d461424886ee39"} {"level":"info","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"259865292e5db84dd65dcc3e272ee2cb4cc8365358b87863b6b50c4ec75a78ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14b8e21143f9fb6cd4dce81d93b6f0c78c1003ad16e46aa279d461424886ee39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14b8e21143f9fb6cd4dce81d93b6f0c78c1003ad16e46aa279d461424886ee39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/259865292e5db84dd65dcc3e272ee2cb4cc8365358b87863b6b50c4ec75a78ad"} {"level":"info","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d77d84d5a17e31b1e5a596a424cfdc87b4361751ea6124a41289f61e577cf67"} {"level":"info","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14b8e21143f9fb6cd4dce81d93b6f0c78c1003ad16e46aa279d461424886ee39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"259865292e5db84dd65dcc3e272ee2cb4cc8365358b87863b6b50c4ec75a78ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["259865292e5db84dd65dcc3e272ee2cb4cc8365358b87863b6b50c4ec75a78ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/297fcfd41c18d02cd340bd6cdab5244738fd53423619389e756dedf5637d1cc4"} {"level":"info","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14b8e21143f9fb6cd4dce81d93b6f0c78c1003ad16e46aa279d461424886ee39"} {"level":"info","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"259865292e5db84dd65dcc3e272ee2cb4cc8365358b87863b6b50c4ec75a78ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d77d84d5a17e31b1e5a596a424cfdc87b4361751ea6124a41289f61e577cf67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d77d84d5a17e31b1e5a596a424cfdc87b4361751ea6124a41289f61e577cf67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0130525c65d3d7e634a1666a16c850b7e5c37ef5470c76545b82aa0120261808"} {"level":"info","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0c2b2d3ad6c69697a314035d2fffd4999283ba21aa042ef8e9926dc5d7aa064"} {"level":"info","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d77d84d5a17e31b1e5a596a424cfdc87b4361751ea6124a41289f61e577cf67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"297fcfd41c18d02cd340bd6cdab5244738fd53423619389e756dedf5637d1cc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["297fcfd41c18d02cd340bd6cdab5244738fd53423619389e756dedf5637d1cc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/259865292e5db84dd65dcc3e272ee2cb4cc8365358b87863b6b50c4ec75a78ad"} {"level":"info","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d77d84d5a17e31b1e5a596a424cfdc87b4361751ea6124a41289f61e577cf67"} {"level":"info","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"297fcfd41c18d02cd340bd6cdab5244738fd53423619389e756dedf5637d1cc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14b8e21143f9fb6cd4dce81d93b6f0c78c1003ad16e46aa279d461424886ee39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0130525c65d3d7e634a1666a16c850b7e5c37ef5470c76545b82aa0120261808","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0130525c65d3d7e634a1666a16c850b7e5c37ef5470c76545b82aa0120261808"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/297fcfd41c18d02cd340bd6cdab5244738fd53423619389e756dedf5637d1cc4"} {"level":"info","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0130525c65d3d7e634a1666a16c850b7e5c37ef5470c76545b82aa0120261808","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0c2b2d3ad6c69697a314035d2fffd4999283ba21aa042ef8e9926dc5d7aa064","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0c2b2d3ad6c69697a314035d2fffd4999283ba21aa042ef8e9926dc5d7aa064"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0130525c65d3d7e634a1666a16c850b7e5c37ef5470c76545b82aa0120261808"} {"level":"info","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0c2b2d3ad6c69697a314035d2fffd4999283ba21aa042ef8e9926dc5d7aa064","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"259865292e5db84dd65dcc3e272ee2cb4cc8365358b87863b6b50c4ec75a78ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d77d84d5a17e31b1e5a596a424cfdc87b4361751ea6124a41289f61e577cf67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"297fcfd41c18d02cd340bd6cdab5244738fd53423619389e756dedf5637d1cc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0130525c65d3d7e634a1666a16c850b7e5c37ef5470c76545b82aa0120261808","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0c2b2d3ad6c69697a314035d2fffd4999283ba21aa042ef8e9926dc5d7aa064","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0c2b2d3ad6c69697a314035d2fffd4999283ba21aa042ef8e9926dc5d7aa064"} {"level":"debug","ts":"2026-07-06T20:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79cd834a114f5be2fe36485e8fff908be0059a1b3c570b9cf85d66353399d7e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79cd834a114f5be2fe36485e8fff908be0059a1b3c570b9cf85d66353399d7e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79cd834a114f5be2fe36485e8fff908be0059a1b3c570b9cf85d66353399d7e3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79cd834a114f5be2fe36485e8fff908be0059a1b3c570b9cf85d66353399d7e3"} {"level":"debug","ts":"2026-07-06T20:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79cd834a114f5be2fe36485e8fff908be0059a1b3c570b9cf85d66353399d7e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79cd834a114f5be2fe36485e8fff908be0059a1b3c570b9cf85d66353399d7e3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79cd834a114f5be2fe36485e8fff908be0059a1b3c570b9cf85d66353399d7e3"} {"level":"debug","ts":"2026-07-06T20:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79cd834a114f5be2fe36485e8fff908be0059a1b3c570b9cf85d66353399d7e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79cd834a114f5be2fe36485e8fff908be0059a1b3c570b9cf85d66353399d7e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79cd834a114f5be2fe36485e8fff908be0059a1b3c570b9cf85d66353399d7e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79cd834a114f5be2fe36485e8fff908be0059a1b3c570b9cf85d66353399d7e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79cd834a114f5be2fe36485e8fff908be0059a1b3c570b9cf85d66353399d7e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79cd834a114f5be2fe36485e8fff908be0059a1b3c570b9cf85d66353399d7e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79cd834a114f5be2fe36485e8fff908be0059a1b3c570b9cf85d66353399d7e3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79cd834a114f5be2fe36485e8fff908be0059a1b3c570b9cf85d66353399d7e3"} {"level":"debug","ts":"2026-07-06T20:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79cd834a114f5be2fe36485e8fff908be0059a1b3c570b9cf85d66353399d7e3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79cd834a114f5be2fe36485e8fff908be0059a1b3c570b9cf85d66353399d7e3"} {"level":"debug","ts":"2026-07-06T20:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79cd834a114f5be2fe36485e8fff908be0059a1b3c570b9cf85d66353399d7e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79cd834a114f5be2fe36485e8fff908be0059a1b3c570b9cf85d66353399d7e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79cd834a114f5be2fe36485e8fff908be0059a1b3c570b9cf85d66353399d7e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79cd834a114f5be2fe36485e8fff908be0059a1b3c570b9cf85d66353399d7e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79cd834a114f5be2fe36485e8fff908be0059a1b3c570b9cf85d66353399d7e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79cd834a114f5be2fe36485e8fff908be0059a1b3c570b9cf85d66353399d7e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79cd834a114f5be2fe36485e8fff908be0059a1b3c570b9cf85d66353399d7e3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79cd834a114f5be2fe36485e8fff908be0059a1b3c570b9cf85d66353399d7e3"} {"level":"debug","ts":"2026-07-06T20:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79cd834a114f5be2fe36485e8fff908be0059a1b3c570b9cf85d66353399d7e3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79cd834a114f5be2fe36485e8fff908be0059a1b3c570b9cf85d66353399d7e3"} {"level":"debug","ts":"2026-07-06T20:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79cd834a114f5be2fe36485e8fff908be0059a1b3c570b9cf85d66353399d7e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79cd834a114f5be2fe36485e8fff908be0059a1b3c570b9cf85d66353399d7e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79cd834a114f5be2fe36485e8fff908be0059a1b3c570b9cf85d66353399d7e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79cd834a114f5be2fe36485e8fff908be0059a1b3c570b9cf85d66353399d7e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79cd834a114f5be2fe36485e8fff908be0059a1b3c570b9cf85d66353399d7e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79cd834a114f5be2fe36485e8fff908be0059a1b3c570b9cf85d66353399d7e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79cd834a114f5be2fe36485e8fff908be0059a1b3c570b9cf85d66353399d7e3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79cd834a114f5be2fe36485e8fff908be0059a1b3c570b9cf85d66353399d7e3"} {"level":"debug","ts":"2026-07-06T20:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79cd834a114f5be2fe36485e8fff908be0059a1b3c570b9cf85d66353399d7e3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79cd834a114f5be2fe36485e8fff908be0059a1b3c570b9cf85d66353399d7e3"} {"level":"debug","ts":"2026-07-06T20:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79cd834a114f5be2fe36485e8fff908be0059a1b3c570b9cf85d66353399d7e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79cd834a114f5be2fe36485e8fff908be0059a1b3c570b9cf85d66353399d7e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79cd834a114f5be2fe36485e8fff908be0059a1b3c570b9cf85d66353399d7e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79cd834a114f5be2fe36485e8fff908be0059a1b3c570b9cf85d66353399d7e3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79cd834a114f5be2fe36485e8fff908be0059a1b3c570b9cf85d66353399d7e3"} {"level":"debug","ts":"2026-07-06T20:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11d9ed101d8e04f622f80a7028893c7dd36e0b9d4a327e1e08aad3f8fd6fe06c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11d9ed101d8e04f622f80a7028893c7dd36e0b9d4a327e1e08aad3f8fd6fe06c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11d9ed101d8e04f622f80a7028893c7dd36e0b9d4a327e1e08aad3f8fd6fe06c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11d9ed101d8e04f622f80a7028893c7dd36e0b9d4a327e1e08aad3f8fd6fe06c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11d9ed101d8e04f622f80a7028893c7dd36e0b9d4a327e1e08aad3f8fd6fe06c"} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11d9ed101d8e04f622f80a7028893c7dd36e0b9d4a327e1e08aad3f8fd6fe06c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11d9ed101d8e04f622f80a7028893c7dd36e0b9d4a327e1e08aad3f8fd6fe06c"} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11d9ed101d8e04f622f80a7028893c7dd36e0b9d4a327e1e08aad3f8fd6fe06c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11d9ed101d8e04f622f80a7028893c7dd36e0b9d4a327e1e08aad3f8fd6fe06c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11d9ed101d8e04f622f80a7028893c7dd36e0b9d4a327e1e08aad3f8fd6fe06c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11d9ed101d8e04f622f80a7028893c7dd36e0b9d4a327e1e08aad3f8fd6fe06c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11d9ed101d8e04f622f80a7028893c7dd36e0b9d4a327e1e08aad3f8fd6fe06c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11d9ed101d8e04f622f80a7028893c7dd36e0b9d4a327e1e08aad3f8fd6fe06c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11d9ed101d8e04f622f80a7028893c7dd36e0b9d4a327e1e08aad3f8fd6fe06c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11d9ed101d8e04f622f80a7028893c7dd36e0b9d4a327e1e08aad3f8fd6fe06c"} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11d9ed101d8e04f622f80a7028893c7dd36e0b9d4a327e1e08aad3f8fd6fe06c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11d9ed101d8e04f622f80a7028893c7dd36e0b9d4a327e1e08aad3f8fd6fe06c"} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11d9ed101d8e04f622f80a7028893c7dd36e0b9d4a327e1e08aad3f8fd6fe06c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11d9ed101d8e04f622f80a7028893c7dd36e0b9d4a327e1e08aad3f8fd6fe06c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11d9ed101d8e04f622f80a7028893c7dd36e0b9d4a327e1e08aad3f8fd6fe06c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11d9ed101d8e04f622f80a7028893c7dd36e0b9d4a327e1e08aad3f8fd6fe06c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11d9ed101d8e04f622f80a7028893c7dd36e0b9d4a327e1e08aad3f8fd6fe06c"} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5d7cc3527e9d6575d1be3496545b2565087148fef2d3fe2eb6f09230bd159e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5d7cc3527e9d6575d1be3496545b2565087148fef2d3fe2eb6f09230bd159e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5d7cc3527e9d6575d1be3496545b2565087148fef2d3fe2eb6f09230bd159e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5d7cc3527e9d6575d1be3496545b2565087148fef2d3fe2eb6f09230bd159e5"} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5d7cc3527e9d6575d1be3496545b2565087148fef2d3fe2eb6f09230bd159e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5d7cc3527e9d6575d1be3496545b2565087148fef2d3fe2eb6f09230bd159e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e5d7cc3527e9d6575d1be3496545b2565087148fef2d3fe2eb6f09230bd159e5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e5d7cc3527e9d6575d1be3496545b2565087148fef2d3fe2eb6f09230bd159e5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5d7cc3527e9d6575d1be3496545b2565087148fef2d3fe2eb6f09230bd159e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5d7cc3527e9d6575d1be3496545b2565087148fef2d3fe2eb6f09230bd159e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5d7cc3527e9d6575d1be3496545b2565087148fef2d3fe2eb6f09230bd159e5"} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5d7cc3527e9d6575d1be3496545b2565087148fef2d3fe2eb6f09230bd159e5"} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5d7cc3527e9d6575d1be3496545b2565087148fef2d3fe2eb6f09230bd159e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5d7cc3527e9d6575d1be3496545b2565087148fef2d3fe2eb6f09230bd159e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5d7cc3527e9d6575d1be3496545b2565087148fef2d3fe2eb6f09230bd159e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5d7cc3527e9d6575d1be3496545b2565087148fef2d3fe2eb6f09230bd159e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5d7cc3527e9d6575d1be3496545b2565087148fef2d3fe2eb6f09230bd159e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5d7cc3527e9d6575d1be3496545b2565087148fef2d3fe2eb6f09230bd159e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5d7cc3527e9d6575d1be3496545b2565087148fef2d3fe2eb6f09230bd159e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5d7cc3527e9d6575d1be3496545b2565087148fef2d3fe2eb6f09230bd159e5"} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5d7cc3527e9d6575d1be3496545b2565087148fef2d3fe2eb6f09230bd159e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5d7cc3527e9d6575d1be3496545b2565087148fef2d3fe2eb6f09230bd159e5"} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8cbab4f7c685f5bfc3fdbd35cc3d4dfb2098ebe9e19dd237554f523d7bc9ff3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8cbab4f7c685f5bfc3fdbd35cc3d4dfb2098ebe9e19dd237554f523d7bc9ff3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8cbab4f7c685f5bfc3fdbd35cc3d4dfb2098ebe9e19dd237554f523d7bc9ff3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8cbab4f7c685f5bfc3fdbd35cc3d4dfb2098ebe9e19dd237554f523d7bc9ff3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8cbab4f7c685f5bfc3fdbd35cc3d4dfb2098ebe9e19dd237554f523d7bc9ff3"} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5d7cc3527e9d6575d1be3496545b2565087148fef2d3fe2eb6f09230bd159e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5d7cc3527e9d6575d1be3496545b2565087148fef2d3fe2eb6f09230bd159e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5d7cc3527e9d6575d1be3496545b2565087148fef2d3fe2eb6f09230bd159e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8cbab4f7c685f5bfc3fdbd35cc3d4dfb2098ebe9e19dd237554f523d7bc9ff3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5d7cc3527e9d6575d1be3496545b2565087148fef2d3fe2eb6f09230bd159e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8cbab4f7c685f5bfc3fdbd35cc3d4dfb2098ebe9e19dd237554f523d7bc9ff3"} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5d7cc3527e9d6575d1be3496545b2565087148fef2d3fe2eb6f09230bd159e5"} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8cbab4f7c685f5bfc3fdbd35cc3d4dfb2098ebe9e19dd237554f523d7bc9ff3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8cbab4f7c685f5bfc3fdbd35cc3d4dfb2098ebe9e19dd237554f523d7bc9ff3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8cbab4f7c685f5bfc3fdbd35cc3d4dfb2098ebe9e19dd237554f523d7bc9ff3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8cbab4f7c685f5bfc3fdbd35cc3d4dfb2098ebe9e19dd237554f523d7bc9ff3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8cbab4f7c685f5bfc3fdbd35cc3d4dfb2098ebe9e19dd237554f523d7bc9ff3"} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492502fe93d58843fb24cf7deea3b1d3d734a8c2e1e1e9ee3aa7a1fe99b9b5fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22"} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"492502fe93d58843fb24cf7deea3b1d3d734a8c2e1e1e9ee3aa7a1fe99b9b5fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/492502fe93d58843fb24cf7deea3b1d3d734a8c2e1e1e9ee3aa7a1fe99b9b5fa"} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492502fe93d58843fb24cf7deea3b1d3d734a8c2e1e1e9ee3aa7a1fe99b9b5fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["492502fe93d58843fb24cf7deea3b1d3d734a8c2e1e1e9ee3aa7a1fe99b9b5fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"492502fe93d58843fb24cf7deea3b1d3d734a8c2e1e1e9ee3aa7a1fe99b9b5fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22"} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492502fe93d58843fb24cf7deea3b1d3d734a8c2e1e1e9ee3aa7a1fe99b9b5fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/492502fe93d58843fb24cf7deea3b1d3d734a8c2e1e1e9ee3aa7a1fe99b9b5fa"} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"492502fe93d58843fb24cf7deea3b1d3d734a8c2e1e1e9ee3aa7a1fe99b9b5fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492502fe93d58843fb24cf7deea3b1d3d734a8c2e1e1e9ee3aa7a1fe99b9b5fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["492502fe93d58843fb24cf7deea3b1d3d734a8c2e1e1e9ee3aa7a1fe99b9b5fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"492502fe93d58843fb24cf7deea3b1d3d734a8c2e1e1e9ee3aa7a1fe99b9b5fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492502fe93d58843fb24cf7deea3b1d3d734a8c2e1e1e9ee3aa7a1fe99b9b5fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["492502fe93d58843fb24cf7deea3b1d3d734a8c2e1e1e9ee3aa7a1fe99b9b5fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22"} {"level":"error","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"492502fe93d58843fb24cf7deea3b1d3d734a8c2e1e1e9ee3aa7a1fe99b9b5fa","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"492502fe93d58843fb24cf7deea3b1d3d734a8c2e1e1e9ee3aa7a1fe99b9b5fa\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492502fe93d58843fb24cf7deea3b1d3d734a8c2e1e1e9ee3aa7a1fe99b9b5fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"492502fe93d58843fb24cf7deea3b1d3d734a8c2e1e1e9ee3aa7a1fe99b9b5fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/492502fe93d58843fb24cf7deea3b1d3d734a8c2e1e1e9ee3aa7a1fe99b9b5fa"} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"492502fe93d58843fb24cf7deea3b1d3d734a8c2e1e1e9ee3aa7a1fe99b9b5fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/492502fe93d58843fb24cf7deea3b1d3d734a8c2e1e1e9ee3aa7a1fe99b9b5fa"} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492502fe93d58843fb24cf7deea3b1d3d734a8c2e1e1e9ee3aa7a1fe99b9b5fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["492502fe93d58843fb24cf7deea3b1d3d734a8c2e1e1e9ee3aa7a1fe99b9b5fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22"} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"492502fe93d58843fb24cf7deea3b1d3d734a8c2e1e1e9ee3aa7a1fe99b9b5fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492502fe93d58843fb24cf7deea3b1d3d734a8c2e1e1e9ee3aa7a1fe99b9b5fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"492502fe93d58843fb24cf7deea3b1d3d734a8c2e1e1e9ee3aa7a1fe99b9b5fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"492502fe93d58843fb24cf7deea3b1d3d734a8c2e1e1e9ee3aa7a1fe99b9b5fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee030367ebca85a6797cf53a43cadee9d28ea4d93b72d34b7b328314d6996e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/492502fe93d58843fb24cf7deea3b1d3d734a8c2e1e1e9ee3aa7a1fe99b9b5fa"} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee030367ebca85a6797cf53a43cadee9d28ea4d93b72d34b7b328314d6996e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492502fe93d58843fb24cf7deea3b1d3d734a8c2e1e1e9ee3aa7a1fe99b9b5fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["492502fe93d58843fb24cf7deea3b1d3d734a8c2e1e1e9ee3aa7a1fe99b9b5fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee030367ebca85a6797cf53a43cadee9d28ea4d93b72d34b7b328314d6996e9"} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"492502fe93d58843fb24cf7deea3b1d3d734a8c2e1e1e9ee3aa7a1fe99b9b5fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee030367ebca85a6797cf53a43cadee9d28ea4d93b72d34b7b328314d6996e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ee030367ebca85a6797cf53a43cadee9d28ea4d93b72d34b7b328314d6996e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/492502fe93d58843fb24cf7deea3b1d3d734a8c2e1e1e9ee3aa7a1fe99b9b5fa"} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee030367ebca85a6797cf53a43cadee9d28ea4d93b72d34b7b328314d6996e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"492502fe93d58843fb24cf7deea3b1d3d734a8c2e1e1e9ee3aa7a1fe99b9b5fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee030367ebca85a6797cf53a43cadee9d28ea4d93b72d34b7b328314d6996e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee030367ebca85a6797cf53a43cadee9d28ea4d93b72d34b7b328314d6996e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee030367ebca85a6797cf53a43cadee9d28ea4d93b72d34b7b328314d6996e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee030367ebca85a6797cf53a43cadee9d28ea4d93b72d34b7b328314d6996e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee030367ebca85a6797cf53a43cadee9d28ea4d93b72d34b7b328314d6996e9"} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee030367ebca85a6797cf53a43cadee9d28ea4d93b72d34b7b328314d6996e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ee030367ebca85a6797cf53a43cadee9d28ea4d93b72d34b7b328314d6996e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/492502fe93d58843fb24cf7deea3b1d3d734a8c2e1e1e9ee3aa7a1fe99b9b5fa"} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee030367ebca85a6797cf53a43cadee9d28ea4d93b72d34b7b328314d6996e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ec0f8adfb8cb52739ad92867e1ac522d5efb475cbfd7f80fcc0e6a08544cd2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee030367ebca85a6797cf53a43cadee9d28ea4d93b72d34b7b328314d6996e9"} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ec0f8adfb8cb52739ad92867e1ac522d5efb475cbfd7f80fcc0e6a08544cd2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee030367ebca85a6797cf53a43cadee9d28ea4d93b72d34b7b328314d6996e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ec0f8adfb8cb52739ad92867e1ac522d5efb475cbfd7f80fcc0e6a08544cd2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ec0f8adfb8cb52739ad92867e1ac522d5efb475cbfd7f80fcc0e6a08544cd2f"} {"level":"info","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ec0f8adfb8cb52739ad92867e1ac522d5efb475cbfd7f80fcc0e6a08544cd2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ec0f8adfb8cb52739ad92867e1ac522d5efb475cbfd7f80fcc0e6a08544cd2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ec0f8adfb8cb52739ad92867e1ac522d5efb475cbfd7f80fcc0e6a08544cd2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4ec0f8adfb8cb52739ad92867e1ac522d5efb475cbfd7f80fcc0e6a08544cd2f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4ec0f8adfb8cb52739ad92867e1ac522d5efb475cbfd7f80fcc0e6a08544cd2f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ec0f8adfb8cb52739ad92867e1ac522d5efb475cbfd7f80fcc0e6a08544cd2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ec0f8adfb8cb52739ad92867e1ac522d5efb475cbfd7f80fcc0e6a08544cd2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee030367ebca85a6797cf53a43cadee9d28ea4d93b72d34b7b328314d6996e9"} {"level":"info","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ec0f8adfb8cb52739ad92867e1ac522d5efb475cbfd7f80fcc0e6a08544cd2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ec0f8adfb8cb52739ad92867e1ac522d5efb475cbfd7f80fcc0e6a08544cd2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ec0f8adfb8cb52739ad92867e1ac522d5efb475cbfd7f80fcc0e6a08544cd2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ec0f8adfb8cb52739ad92867e1ac522d5efb475cbfd7f80fcc0e6a08544cd2f"} {"level":"info","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ec0f8adfb8cb52739ad92867e1ac522d5efb475cbfd7f80fcc0e6a08544cd2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ec0f8adfb8cb52739ad92867e1ac522d5efb475cbfd7f80fcc0e6a08544cd2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4ec0f8adfb8cb52739ad92867e1ac522d5efb475cbfd7f80fcc0e6a08544cd2f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4ec0f8adfb8cb52739ad92867e1ac522d5efb475cbfd7f80fcc0e6a08544cd2f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ec0f8adfb8cb52739ad92867e1ac522d5efb475cbfd7f80fcc0e6a08544cd2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ec0f8adfb8cb52739ad92867e1ac522d5efb475cbfd7f80fcc0e6a08544cd2f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ec0f8adfb8cb52739ad92867e1ac522d5efb475cbfd7f80fcc0e6a08544cd2f"} {"level":"info","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ec0f8adfb8cb52739ad92867e1ac522d5efb475cbfd7f80fcc0e6a08544cd2f"} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ec0f8adfb8cb52739ad92867e1ac522d5efb475cbfd7f80fcc0e6a08544cd2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ec0f8adfb8cb52739ad92867e1ac522d5efb475cbfd7f80fcc0e6a08544cd2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ec0f8adfb8cb52739ad92867e1ac522d5efb475cbfd7f80fcc0e6a08544cd2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ec0f8adfb8cb52739ad92867e1ac522d5efb475cbfd7f80fcc0e6a08544cd2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ec0f8adfb8cb52739ad92867e1ac522d5efb475cbfd7f80fcc0e6a08544cd2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ec0f8adfb8cb52739ad92867e1ac522d5efb475cbfd7f80fcc0e6a08544cd2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d681e1b7279fa604f0de485972448b2474fa95d564bb0977d662b9937aaebc65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d681e1b7279fa604f0de485972448b2474fa95d564bb0977d662b9937aaebc65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ec0f8adfb8cb52739ad92867e1ac522d5efb475cbfd7f80fcc0e6a08544cd2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d681e1b7279fa604f0de485972448b2474fa95d564bb0977d662b9937aaebc65","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ec0f8adfb8cb52739ad92867e1ac522d5efb475cbfd7f80fcc0e6a08544cd2f"} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d681e1b7279fa604f0de485972448b2474fa95d564bb0977d662b9937aaebc65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d681e1b7279fa604f0de485972448b2474fa95d564bb0977d662b9937aaebc65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ec0f8adfb8cb52739ad92867e1ac522d5efb475cbfd7f80fcc0e6a08544cd2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ec0f8adfb8cb52739ad92867e1ac522d5efb475cbfd7f80fcc0e6a08544cd2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ec0f8adfb8cb52739ad92867e1ac522d5efb475cbfd7f80fcc0e6a08544cd2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d681e1b7279fa604f0de485972448b2474fa95d564bb0977d662b9937aaebc65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ec0f8adfb8cb52739ad92867e1ac522d5efb475cbfd7f80fcc0e6a08544cd2f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d681e1b7279fa604f0de485972448b2474fa95d564bb0977d662b9937aaebc65"} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d681e1b7279fa604f0de485972448b2474fa95d564bb0977d662b9937aaebc65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d681e1b7279fa604f0de485972448b2474fa95d564bb0977d662b9937aaebc65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d681e1b7279fa604f0de485972448b2474fa95d564bb0977d662b9937aaebc65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d681e1b7279fa604f0de485972448b2474fa95d564bb0977d662b9937aaebc65","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ec0f8adfb8cb52739ad92867e1ac522d5efb475cbfd7f80fcc0e6a08544cd2f"} {"level":"info","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d681e1b7279fa604f0de485972448b2474fa95d564bb0977d662b9937aaebc65"} {"level":"info","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ec0f8adfb8cb52739ad92867e1ac522d5efb475cbfd7f80fcc0e6a08544cd2f"} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8"} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8"} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8"} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8"} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8"} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8"} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8"} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8"} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8"} {"level":"info","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8"} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8"} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8"} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8"} {"level":"info","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aaf8e057-ca13-4f31-b19f-7312eb6fcace","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47916","PortSpecifier":{"PortValue":47916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aaf8e057-ca13-4f31-b19f-7312eb6fcace","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aaf8e057-ca13-4f31-b19f-7312eb6fcace","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47916","PortSpecifier":{"PortValue":47916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368280,"nanos":403887223},"http":{"id":"aaf8e057-ca13-4f31-b19f-7312eb6fcace","method":"POST","headers":{":authority":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"aaf8e057-ca13-4f31-b19f-7312eb6fcace","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aaf8e057-ca13-4f31-b19f-7312eb6fcace","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e6077e34-2eac-4ffb-9aa1-503949628406","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"]}} {"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aaf8e057-ca13-4f31-b19f-7312eb6fcace","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e6077e34-2eac-4ffb-9aa1-503949628406","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0130525c65d3d7e634a1666a16c850b7e5c37ef5470c76545b82aa0120261808"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aaf8e057-ca13-4f31-b19f-7312eb6fcace","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aaf8e057-ca13-4f31-b19f-7312eb6fcace","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aaf8e057-ca13-4f31-b19f-7312eb6fcace","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4430fb/auth-test-model-4430fb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"aaf8e057-ca13-4f31-b19f-7312eb6fcace","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aaf8e057-ca13-4f31-b19f-7312eb6fcace","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aaf8e057-ca13-4f31-b19f-7312eb6fcace","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aaf8e057-ca13-4f31-b19f-7312eb6fcace","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aaf8e057-ca13-4f31-b19f-7312eb6fcace","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57eb584b-4d21-41c6-8579-4e33c774c6ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55660","PortSpecifier":{"PortValue":55660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57eb584b-4d21-41c6-8579-4e33c774c6ed","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57eb584b-4d21-41c6-8579-4e33c774c6ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55660","PortSpecifier":{"PortValue":55660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368280,"nanos":468447175},"http":{"id":"57eb584b-4d21-41c6-8579-4e33c774c6ed","method":"POST","headers":{":authority":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"57eb584b-4d21-41c6-8579-4e33c774c6ed","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57eb584b-4d21-41c6-8579-4e33c774c6ed","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e6077e34-2eac-4ffb-9aa1-503949628406","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"]}} {"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57eb584b-4d21-41c6-8579-4e33c774c6ed","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e6077e34-2eac-4ffb-9aa1-503949628406","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57eb584b-4d21-41c6-8579-4e33c774c6ed","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57eb584b-4d21-41c6-8579-4e33c774c6ed","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57eb584b-4d21-41c6-8579-4e33c774c6ed","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-33ae61/auth-test-model-33ae61\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"57eb584b-4d21-41c6-8579-4e33c774c6ed","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57eb584b-4d21-41c6-8579-4e33c774c6ed","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57eb584b-4d21-41c6-8579-4e33c774c6ed","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57eb584b-4d21-41c6-8579-4e33c774c6ed","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57eb584b-4d21-41c6-8579-4e33c774c6ed","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88fa0931-fde8-4e31-a7a5-13587b2225b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47920","PortSpecifier":{"PortValue":47920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"88fa0931-fde8-4e31-a7a5-13587b2225b5","method":"GET","path":"/maas-api/v1/api-keys/c62994c4-3826-4973-ad7f-081471788165","host":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88fa0931-fde8-4e31-a7a5-13587b2225b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47920","PortSpecifier":{"PortValue":47920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368280,"nanos":558078057},"http":{"id":"88fa0931-fde8-4e31-a7a5-13587b2225b5","method":"GET","headers":{":authority":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c62994c4-3826-4973-ad7f-081471788165",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"88fa0931-fde8-4e31-a7a5-13587b2225b5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"88fa0931-fde8-4e31-a7a5-13587b2225b5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e6077e34-2eac-4ffb-9aa1-503949628406","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"]}} {"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"88fa0931-fde8-4e31-a7a5-13587b2225b5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e6077e34-2eac-4ffb-9aa1-503949628406","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0130525c65d3d7e634a1666a16c850b7e5c37ef5470c76545b82aa0120261808"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c62994c4-3826-4973-ad7f-081471788165",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88fa0931-fde8-4e31-a7a5-13587b2225b5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88fa0931-fde8-4e31-a7a5-13587b2225b5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88fa0931-fde8-4e31-a7a5-13587b2225b5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4430fb/auth-test-model-4430fb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"88fa0931-fde8-4e31-a7a5-13587b2225b5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88fa0931-fde8-4e31-a7a5-13587b2225b5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88fa0931-fde8-4e31-a7a5-13587b2225b5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88fa0931-fde8-4e31-a7a5-13587b2225b5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88fa0931-fde8-4e31-a7a5-13587b2225b5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"884787d4-bf73-4f50-a708-02efabc21039","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55676","PortSpecifier":{"PortValue":55676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"884787d4-bf73-4f50-a708-02efabc21039","method":"GET","path":"/maas-api/v1/api-keys/612af850-827c-4b33-8994-9bd294bfd900","host":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"884787d4-bf73-4f50-a708-02efabc21039","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55676","PortSpecifier":{"PortValue":55676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368280,"nanos":602741844},"http":{"id":"884787d4-bf73-4f50-a708-02efabc21039","method":"GET","headers":{":authority":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/612af850-827c-4b33-8994-9bd294bfd900",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"884787d4-bf73-4f50-a708-02efabc21039","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"884787d4-bf73-4f50-a708-02efabc21039","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e6077e34-2eac-4ffb-9aa1-503949628406","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"]}} {"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"884787d4-bf73-4f50-a708-02efabc21039","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e6077e34-2eac-4ffb-9aa1-503949628406","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/612af850-827c-4b33-8994-9bd294bfd900",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"884787d4-bf73-4f50-a708-02efabc21039","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"884787d4-bf73-4f50-a708-02efabc21039","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"884787d4-bf73-4f50-a708-02efabc21039","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-33ae61/auth-test-model-33ae61\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"884787d4-bf73-4f50-a708-02efabc21039","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"884787d4-bf73-4f50-a708-02efabc21039","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"884787d4-bf73-4f50-a708-02efabc21039","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"884787d4-bf73-4f50-a708-02efabc21039","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"884787d4-bf73-4f50-a708-02efabc21039","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c732340-5d07-4bba-9c79-01fe066b6240","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51768","PortSpecifier":{"PortValue":51768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7c732340-5d07-4bba-9c79-01fe066b6240","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c732340-5d07-4bba-9c79-01fe066b6240","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51768","PortSpecifier":{"PortValue":51768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368298,"nanos":139199637},"http":{"id":"7c732340-5d07-4bba-9c79-01fe066b6240","method":"POST","headers":{":authority":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7c732340-5d07-4bba-9c79-01fe066b6240","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7c732340-5d07-4bba-9c79-01fe066b6240","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e6077e34-2eac-4ffb-9aa1-503949628406","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"]}} {"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7c732340-5d07-4bba-9c79-01fe066b6240","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e6077e34-2eac-4ffb-9aa1-503949628406","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0130525c65d3d7e634a1666a16c850b7e5c37ef5470c76545b82aa0120261808"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c732340-5d07-4bba-9c79-01fe066b6240","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c732340-5d07-4bba-9c79-01fe066b6240","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c732340-5d07-4bba-9c79-01fe066b6240","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4430fb/auth-test-model-4430fb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7c732340-5d07-4bba-9c79-01fe066b6240","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c732340-5d07-4bba-9c79-01fe066b6240","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c732340-5d07-4bba-9c79-01fe066b6240","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c732340-5d07-4bba-9c79-01fe066b6240","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c732340-5d07-4bba-9c79-01fe066b6240","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91efc4ab-621c-4b14-8649-79c5f6ad6822","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55866","PortSpecifier":{"PortValue":55866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"91efc4ab-621c-4b14-8649-79c5f6ad6822","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91efc4ab-621c-4b14-8649-79c5f6ad6822","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55866","PortSpecifier":{"PortValue":55866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368298,"nanos":186354487},"http":{"id":"91efc4ab-621c-4b14-8649-79c5f6ad6822","method":"POST","headers":{":authority":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"91efc4ab-621c-4b14-8649-79c5f6ad6822","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"91efc4ab-621c-4b14-8649-79c5f6ad6822","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e6077e34-2eac-4ffb-9aa1-503949628406","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"]}} {"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"91efc4ab-621c-4b14-8649-79c5f6ad6822","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e6077e34-2eac-4ffb-9aa1-503949628406","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91efc4ab-621c-4b14-8649-79c5f6ad6822","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91efc4ab-621c-4b14-8649-79c5f6ad6822","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91efc4ab-621c-4b14-8649-79c5f6ad6822","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-33ae61/auth-test-model-33ae61\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"91efc4ab-621c-4b14-8649-79c5f6ad6822","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91efc4ab-621c-4b14-8649-79c5f6ad6822","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91efc4ab-621c-4b14-8649-79c5f6ad6822","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91efc4ab-621c-4b14-8649-79c5f6ad6822","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91efc4ab-621c-4b14-8649-79c5f6ad6822","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f96d54b0-0a4a-424a-995d-fa14ed04f008","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51776","PortSpecifier":{"PortValue":51776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f96d54b0-0a4a-424a-995d-fa14ed04f008","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f96d54b0-0a4a-424a-995d-fa14ed04f008","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51776","PortSpecifier":{"PortValue":51776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368298,"nanos":231929820},"http":{"id":"f96d54b0-0a4a-424a-995d-fa14ed04f008","method":"GET","headers":{":authority":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f96d54b0-0a4a-424a-995d-fa14ed04f008","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-LRmcw8G6Gruuzu2M_T1oZ5KGL3yjLA0K1yQtluMT6kCuXKJltjNPtYWsueyK"} {"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f96d54b0-0a4a-424a-995d-fa14ed04f008","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4430fb.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-LRmcw8G6Gruuzu2M_T1oZ5KGL3yjLA0K1yQtluMT6kCuXKJltjNPtYWsueyK\"}"} {"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f96d54b0-0a4a-424a-995d-fa14ed04f008","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4430fb.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"60813b3e-f02c-4224-8001-8bf147dbb697","keyName":"e2e-auth-iso-a-8e9893","subscription":"e2e-auth-iso-4f0796","tenant":"e2e-shared-a-4430fb","userId":"60813b3e-f02c-4224-8001-8bf147dbb697","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f96d54b0-0a4a-424a-995d-fa14ed04f008","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f96d54b0-0a4a-424a-995d-fa14ed04f008","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f96d54b0-0a4a-424a-995d-fa14ed04f008","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f96d54b0-0a4a-424a-995d-fa14ed04f008","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4430fb/auth-test-model-4430fb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f96d54b0-0a4a-424a-995d-fa14ed04f008","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-4f0796"} {"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f96d54b0-0a4a-424a-995d-fa14ed04f008","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f96d54b0-0a4a-424a-995d-fa14ed04f008","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f96d54b0-0a4a-424a-995d-fa14ed04f008","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f96d54b0-0a4a-424a-995d-fa14ed04f008","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f96d54b0-0a4a-424a-995d-fa14ed04f008","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:05:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1fabc2b4-6d82-4645-b525-d22ee39559e8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:33362","PortSpecifier":{"PortValue":33362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1fabc2b4-6d82-4645-b525-d22ee39559e8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1fabc2b4-6d82-4645-b525-d22ee39559e8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:33362","PortSpecifier":{"PortValue":33362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368313,"nanos":545473187},"http":{"id":"1fabc2b4-6d82-4645-b525-d22ee39559e8","method":"POST","headers":{":authority":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1fabc2b4-6d82-4645-b525-d22ee39559e8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1fabc2b4-6d82-4645-b525-d22ee39559e8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e6077e34-2eac-4ffb-9aa1-503949628406","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"]}} {"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1fabc2b4-6d82-4645-b525-d22ee39559e8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e6077e34-2eac-4ffb-9aa1-503949628406","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0130525c65d3d7e634a1666a16c850b7e5c37ef5470c76545b82aa0120261808"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fabc2b4-6d82-4645-b525-d22ee39559e8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fabc2b4-6d82-4645-b525-d22ee39559e8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fabc2b4-6d82-4645-b525-d22ee39559e8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4430fb/auth-test-model-4430fb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1fabc2b4-6d82-4645-b525-d22ee39559e8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1fabc2b4-6d82-4645-b525-d22ee39559e8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1fabc2b4-6d82-4645-b525-d22ee39559e8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T20:05:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1fabc2b4-6d82-4645-b525-d22ee39559e8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1fabc2b4-6d82-4645-b525-d22ee39559e8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:05:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1290c025-433f-46fa-b6db-bd1a29a5344a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57126","PortSpecifier":{"PortValue":57126}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1290c025-433f-46fa-b6db-bd1a29a5344a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1290c025-433f-46fa-b6db-bd1a29a5344a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57126","PortSpecifier":{"PortValue":57126}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368313,"nanos":592515143},"http":{"id":"1290c025-433f-46fa-b6db-bd1a29a5344a","method":"POST","headers":{":authority":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1290c025-433f-46fa-b6db-bd1a29a5344a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1290c025-433f-46fa-b6db-bd1a29a5344a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e6077e34-2eac-4ffb-9aa1-503949628406","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"]}} {"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1290c025-433f-46fa-b6db-bd1a29a5344a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e6077e34-2eac-4ffb-9aa1-503949628406","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1290c025-433f-46fa-b6db-bd1a29a5344a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1290c025-433f-46fa-b6db-bd1a29a5344a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1290c025-433f-46fa-b6db-bd1a29a5344a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-33ae61/auth-test-model-33ae61\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1290c025-433f-46fa-b6db-bd1a29a5344a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1290c025-433f-46fa-b6db-bd1a29a5344a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1290c025-433f-46fa-b6db-bd1a29a5344a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T20:05:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1290c025-433f-46fa-b6db-bd1a29a5344a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1290c025-433f-46fa-b6db-bd1a29a5344a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:05:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6ce27af-ad45-4b9c-a9f5-317a52b73fbe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57136","PortSpecifier":{"PortValue":57136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c6ce27af-ad45-4b9c-a9f5-317a52b73fbe","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6ce27af-ad45-4b9c-a9f5-317a52b73fbe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57136","PortSpecifier":{"PortValue":57136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368313,"nanos":639992261},"http":{"id":"c6ce27af-ad45-4b9c-a9f5-317a52b73fbe","method":"GET","headers":{":authority":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c6ce27af-ad45-4b9c-a9f5-317a52b73fbe","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-9cdDVaxnPn7YHyEY_UYioDh4gOWRtn5MCLV4614owi7JzL4KxD6RI3RVVeZy"} {"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c6ce27af-ad45-4b9c-a9f5-317a52b73fbe","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-33ae61.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-9cdDVaxnPn7YHyEY_UYioDh4gOWRtn5MCLV4614owi7JzL4KxD6RI3RVVeZy\"}"} {"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c6ce27af-ad45-4b9c-a9f5-317a52b73fbe","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-33ae61.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c6ce27af-ad45-4b9c-a9f5-317a52b73fbe","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"c6ce27af-ad45-4b9c-a9f5-317a52b73fbe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-06T20:05:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6ce27af-ad45-4b9c-a9f5-317a52b73fbe","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6ce27af-ad45-4b9c-a9f5-317a52b73fbe","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2a98c02-a6c3-439b-832b-a6f4370593d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44266","PortSpecifier":{"PortValue":44266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f2a98c02-a6c3-439b-832b-a6f4370593d3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2a98c02-a6c3-439b-832b-a6f4370593d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44266","PortSpecifier":{"PortValue":44266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368331,"nanos":334607166},"http":{"id":"f2a98c02-a6c3-439b-832b-a6f4370593d3","method":"POST","headers":{":authority":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f2a98c02-a6c3-439b-832b-a6f4370593d3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f2a98c02-a6c3-439b-832b-a6f4370593d3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e6077e34-2eac-4ffb-9aa1-503949628406","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"]}} {"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f2a98c02-a6c3-439b-832b-a6f4370593d3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e6077e34-2eac-4ffb-9aa1-503949628406","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0130525c65d3d7e634a1666a16c850b7e5c37ef5470c76545b82aa0120261808"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2a98c02-a6c3-439b-832b-a6f4370593d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2a98c02-a6c3-439b-832b-a6f4370593d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2a98c02-a6c3-439b-832b-a6f4370593d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4430fb/auth-test-model-4430fb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f2a98c02-a6c3-439b-832b-a6f4370593d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2a98c02-a6c3-439b-832b-a6f4370593d3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2a98c02-a6c3-439b-832b-a6f4370593d3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2a98c02-a6c3-439b-832b-a6f4370593d3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2a98c02-a6c3-439b-832b-a6f4370593d3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e54b804-7d09-47ff-8104-408ff25bac8d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52020","PortSpecifier":{"PortValue":52020}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4e54b804-7d09-47ff-8104-408ff25bac8d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e54b804-7d09-47ff-8104-408ff25bac8d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52020","PortSpecifier":{"PortValue":52020}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368331,"nanos":373497574},"http":{"id":"4e54b804-7d09-47ff-8104-408ff25bac8d","method":"POST","headers":{":authority":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4e54b804-7d09-47ff-8104-408ff25bac8d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4e54b804-7d09-47ff-8104-408ff25bac8d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e6077e34-2eac-4ffb-9aa1-503949628406","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"]}} {"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4e54b804-7d09-47ff-8104-408ff25bac8d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e6077e34-2eac-4ffb-9aa1-503949628406","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e54b804-7d09-47ff-8104-408ff25bac8d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e54b804-7d09-47ff-8104-408ff25bac8d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e54b804-7d09-47ff-8104-408ff25bac8d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-33ae61/auth-test-model-33ae61\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4e54b804-7d09-47ff-8104-408ff25bac8d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e54b804-7d09-47ff-8104-408ff25bac8d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e54b804-7d09-47ff-8104-408ff25bac8d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e54b804-7d09-47ff-8104-408ff25bac8d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e54b804-7d09-47ff-8104-408ff25bac8d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b4f58e83-eaf7-4526-96d6-9249d59fb9f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44270","PortSpecifier":{"PortValue":44270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b4f58e83-eaf7-4526-96d6-9249d59fb9f5","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b4f58e83-eaf7-4526-96d6-9249d59fb9f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44270","PortSpecifier":{"PortValue":44270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368331,"nanos":418088888},"http":{"id":"b4f58e83-eaf7-4526-96d6-9249d59fb9f5","method":"POST","headers":{":authority":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b4f58e83-eaf7-4526-96d6-9249d59fb9f5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b4f58e83-eaf7-4526-96d6-9249d59fb9f5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e6077e34-2eac-4ffb-9aa1-503949628406","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"]}} {"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b4f58e83-eaf7-4526-96d6-9249d59fb9f5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e6077e34-2eac-4ffb-9aa1-503949628406","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0130525c65d3d7e634a1666a16c850b7e5c37ef5470c76545b82aa0120261808"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4f58e83-eaf7-4526-96d6-9249d59fb9f5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4f58e83-eaf7-4526-96d6-9249d59fb9f5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4f58e83-eaf7-4526-96d6-9249d59fb9f5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4430fb/auth-test-model-4430fb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b4f58e83-eaf7-4526-96d6-9249d59fb9f5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b4f58e83-eaf7-4526-96d6-9249d59fb9f5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b4f58e83-eaf7-4526-96d6-9249d59fb9f5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b4f58e83-eaf7-4526-96d6-9249d59fb9f5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b4f58e83-eaf7-4526-96d6-9249d59fb9f5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec22aa6d-1810-473c-b45b-b603bbdf7965","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52022","PortSpecifier":{"PortValue":52022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ec22aa6d-1810-473c-b45b-b603bbdf7965","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec22aa6d-1810-473c-b45b-b603bbdf7965","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52022","PortSpecifier":{"PortValue":52022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368331,"nanos":465657684},"http":{"id":"ec22aa6d-1810-473c-b45b-b603bbdf7965","method":"POST","headers":{":authority":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ec22aa6d-1810-473c-b45b-b603bbdf7965","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ec22aa6d-1810-473c-b45b-b603bbdf7965","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e6077e34-2eac-4ffb-9aa1-503949628406","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"]}} {"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ec22aa6d-1810-473c-b45b-b603bbdf7965","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e6077e34-2eac-4ffb-9aa1-503949628406","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec22aa6d-1810-473c-b45b-b603bbdf7965","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec22aa6d-1810-473c-b45b-b603bbdf7965","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec22aa6d-1810-473c-b45b-b603bbdf7965","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-33ae61/auth-test-model-33ae61\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ec22aa6d-1810-473c-b45b-b603bbdf7965","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec22aa6d-1810-473c-b45b-b603bbdf7965","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec22aa6d-1810-473c-b45b-b603bbdf7965","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec22aa6d-1810-473c-b45b-b603bbdf7965","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec22aa6d-1810-473c-b45b-b603bbdf7965","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9601fc3-a3c6-4d5c-a4c6-1387da66b674","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50072","PortSpecifier":{"PortValue":50072}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e9601fc3-a3c6-4d5c-a4c6-1387da66b674","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9601fc3-a3c6-4d5c-a4c6-1387da66b674","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50072","PortSpecifier":{"PortValue":50072}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368355,"nanos":370134061},"http":{"id":"e9601fc3-a3c6-4d5c-a4c6-1387da66b674","method":"POST","headers":{":authority":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e9601fc3-a3c6-4d5c-a4c6-1387da66b674","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e9601fc3-a3c6-4d5c-a4c6-1387da66b674","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e6077e34-2eac-4ffb-9aa1-503949628406","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"]}} {"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e9601fc3-a3c6-4d5c-a4c6-1387da66b674","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e6077e34-2eac-4ffb-9aa1-503949628406","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0130525c65d3d7e634a1666a16c850b7e5c37ef5470c76545b82aa0120261808"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9601fc3-a3c6-4d5c-a4c6-1387da66b674","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9601fc3-a3c6-4d5c-a4c6-1387da66b674","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9601fc3-a3c6-4d5c-a4c6-1387da66b674","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4430fb/auth-test-model-4430fb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e9601fc3-a3c6-4d5c-a4c6-1387da66b674","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9601fc3-a3c6-4d5c-a4c6-1387da66b674","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9601fc3-a3c6-4d5c-a4c6-1387da66b674","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9601fc3-a3c6-4d5c-a4c6-1387da66b674","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9601fc3-a3c6-4d5c-a4c6-1387da66b674","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76230874-1ea4-4499-a3e1-b0ba14859e91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:33394","PortSpecifier":{"PortValue":33394}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"76230874-1ea4-4499-a3e1-b0ba14859e91","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76230874-1ea4-4499-a3e1-b0ba14859e91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:33394","PortSpecifier":{"PortValue":33394}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368355,"nanos":410072458},"http":{"id":"76230874-1ea4-4499-a3e1-b0ba14859e91","method":"POST","headers":{":authority":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"76230874-1ea4-4499-a3e1-b0ba14859e91","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"76230874-1ea4-4499-a3e1-b0ba14859e91","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e6077e34-2eac-4ffb-9aa1-503949628406","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"]}} {"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"76230874-1ea4-4499-a3e1-b0ba14859e91","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e6077e34-2eac-4ffb-9aa1-503949628406","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76230874-1ea4-4499-a3e1-b0ba14859e91","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76230874-1ea4-4499-a3e1-b0ba14859e91","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76230874-1ea4-4499-a3e1-b0ba14859e91","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-33ae61/auth-test-model-33ae61\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"76230874-1ea4-4499-a3e1-b0ba14859e91","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76230874-1ea4-4499-a3e1-b0ba14859e91","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76230874-1ea4-4499-a3e1-b0ba14859e91","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76230874-1ea4-4499-a3e1-b0ba14859e91","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76230874-1ea4-4499-a3e1-b0ba14859e91","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b23e64d-440f-4290-a12c-aabf729f3527","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:33398","PortSpecifier":{"PortValue":33398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9b23e64d-440f-4290-a12c-aabf729f3527","method":"GET","path":"/maas-api/v1/api-keys/025e250c-f790-45c3-bb24-c54e0a56d78d","host":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b23e64d-440f-4290-a12c-aabf729f3527","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:33398","PortSpecifier":{"PortValue":33398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368355,"nanos":450545268},"http":{"id":"9b23e64d-440f-4290-a12c-aabf729f3527","method":"GET","headers":{":authority":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/025e250c-f790-45c3-bb24-c54e0a56d78d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9b23e64d-440f-4290-a12c-aabf729f3527","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9b23e64d-440f-4290-a12c-aabf729f3527","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e6077e34-2eac-4ffb-9aa1-503949628406","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"]}} {"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9b23e64d-440f-4290-a12c-aabf729f3527","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e6077e34-2eac-4ffb-9aa1-503949628406","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/025e250c-f790-45c3-bb24-c54e0a56d78d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b23e64d-440f-4290-a12c-aabf729f3527","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b23e64d-440f-4290-a12c-aabf729f3527","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b23e64d-440f-4290-a12c-aabf729f3527","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-33ae61/auth-test-model-33ae61\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9b23e64d-440f-4290-a12c-aabf729f3527","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b23e64d-440f-4290-a12c-aabf729f3527","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b23e64d-440f-4290-a12c-aabf729f3527","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b23e64d-440f-4290-a12c-aabf729f3527","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b23e64d-440f-4290-a12c-aabf729f3527","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"14cdce3d-cb93-4ebf-811c-f4db8967affa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50082","PortSpecifier":{"PortValue":50082}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"14cdce3d-cb93-4ebf-811c-f4db8967affa","method":"GET","path":"/maas-api/v1/api-keys/025e250c-f790-45c3-bb24-c54e0a56d78d","host":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"14cdce3d-cb93-4ebf-811c-f4db8967affa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50082","PortSpecifier":{"PortValue":50082}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368355,"nanos":490007425},"http":{"id":"14cdce3d-cb93-4ebf-811c-f4db8967affa","method":"GET","headers":{":authority":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/025e250c-f790-45c3-bb24-c54e0a56d78d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"14cdce3d-cb93-4ebf-811c-f4db8967affa","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"14cdce3d-cb93-4ebf-811c-f4db8967affa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e6077e34-2eac-4ffb-9aa1-503949628406","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"]}} {"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"14cdce3d-cb93-4ebf-811c-f4db8967affa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e6077e34-2eac-4ffb-9aa1-503949628406","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0130525c65d3d7e634a1666a16c850b7e5c37ef5470c76545b82aa0120261808"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/025e250c-f790-45c3-bb24-c54e0a56d78d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14cdce3d-cb93-4ebf-811c-f4db8967affa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14cdce3d-cb93-4ebf-811c-f4db8967affa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14cdce3d-cb93-4ebf-811c-f4db8967affa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4430fb/auth-test-model-4430fb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"14cdce3d-cb93-4ebf-811c-f4db8967affa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14cdce3d-cb93-4ebf-811c-f4db8967affa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14cdce3d-cb93-4ebf-811c-f4db8967affa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"14cdce3d-cb93-4ebf-811c-f4db8967affa","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"14cdce3d-cb93-4ebf-811c-f4db8967affa","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:06:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"234b7792-e58f-48ad-adec-9e4bb8df573b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:46160","PortSpecifier":{"PortValue":46160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"234b7792-e58f-48ad-adec-9e4bb8df573b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:06:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"234b7792-e58f-48ad-adec-9e4bb8df573b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:46160","PortSpecifier":{"PortValue":46160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368370,"nanos":799038543},"http":{"id":"234b7792-e58f-48ad-adec-9e4bb8df573b","method":"POST","headers":{":authority":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:06:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"234b7792-e58f-48ad-adec-9e4bb8df573b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:06:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"234b7792-e58f-48ad-adec-9e4bb8df573b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e6077e34-2eac-4ffb-9aa1-503949628406","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"]}} {"level":"debug","ts":"2026-07-06T20:06:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"234b7792-e58f-48ad-adec-9e4bb8df573b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e6077e34-2eac-4ffb-9aa1-503949628406","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0130525c65d3d7e634a1666a16c850b7e5c37ef5470c76545b82aa0120261808"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:06:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"234b7792-e58f-48ad-adec-9e4bb8df573b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:06:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"234b7792-e58f-48ad-adec-9e4bb8df573b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:06:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"234b7792-e58f-48ad-adec-9e4bb8df573b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4430fb/auth-test-model-4430fb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:06:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"234b7792-e58f-48ad-adec-9e4bb8df573b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:06:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"234b7792-e58f-48ad-adec-9e4bb8df573b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T20:06:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"234b7792-e58f-48ad-adec-9e4bb8df573b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T20:06:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"234b7792-e58f-48ad-adec-9e4bb8df573b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:06:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"234b7792-e58f-48ad-adec-9e4bb8df573b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:06:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03960c46-9993-414c-a309-a8e51d32062c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50406","PortSpecifier":{"PortValue":50406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"03960c46-9993-414c-a309-a8e51d32062c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:06:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03960c46-9993-414c-a309-a8e51d32062c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50406","PortSpecifier":{"PortValue":50406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368370,"nanos":842409756},"http":{"id":"03960c46-9993-414c-a309-a8e51d32062c","method":"POST","headers":{":authority":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:06:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"03960c46-9993-414c-a309-a8e51d32062c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:06:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"03960c46-9993-414c-a309-a8e51d32062c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e6077e34-2eac-4ffb-9aa1-503949628406","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"]}} {"level":"debug","ts":"2026-07-06T20:06:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"03960c46-9993-414c-a309-a8e51d32062c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e6077e34-2eac-4ffb-9aa1-503949628406","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:06:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03960c46-9993-414c-a309-a8e51d32062c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:06:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03960c46-9993-414c-a309-a8e51d32062c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:06:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03960c46-9993-414c-a309-a8e51d32062c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-33ae61/auth-test-model-33ae61\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:06:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"03960c46-9993-414c-a309-a8e51d32062c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:06:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03960c46-9993-414c-a309-a8e51d32062c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:06:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03960c46-9993-414c-a309-a8e51d32062c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T20:06:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03960c46-9993-414c-a309-a8e51d32062c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:06:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03960c46-9993-414c-a309-a8e51d32062c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:06:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc00d916-30f9-43b0-a2a5-000a68d9bb7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:46164","PortSpecifier":{"PortValue":46164}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cc00d916-30f9-43b0-a2a5-000a68d9bb7a","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:06:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc00d916-30f9-43b0-a2a5-000a68d9bb7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:46164","PortSpecifier":{"PortValue":46164}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368370,"nanos":887667837},"http":{"id":"cc00d916-30f9-43b0-a2a5-000a68d9bb7a","method":"POST","headers":{":authority":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:06:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cc00d916-30f9-43b0-a2a5-000a68d9bb7a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8JJK5UrvvazKSzDK_TGA3yIqdf9stEEYdtsoUyWrKBxn6jyGxm8r2ULQAziI"} {"level":"debug","ts":"2026-07-06T20:06:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cc00d916-30f9-43b0-a2a5-000a68d9bb7a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4430fb.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8JJK5UrvvazKSzDK_TGA3yIqdf9stEEYdtsoUyWrKBxn6jyGxm8r2ULQAziI\"}"} {"level":"debug","ts":"2026-07-06T20:06:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cc00d916-30f9-43b0-a2a5-000a68d9bb7a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4430fb.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ad5b5457-a186-4662-89de-c1db098f18aa","keyName":"e2e-auth-iso-a-9038d9","subscription":"e2e-auth-iso-de7f75","tenant":"e2e-shared-a-4430fb","userId":"ad5b5457-a186-4662-89de-c1db098f18aa","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T20:06:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cc00d916-30f9-43b0-a2a5-000a68d9bb7a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:06:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc00d916-30f9-43b0-a2a5-000a68d9bb7a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:06:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc00d916-30f9-43b0-a2a5-000a68d9bb7a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:06:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc00d916-30f9-43b0-a2a5-000a68d9bb7a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4430fb/auth-test-model-4430fb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:06:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc00d916-30f9-43b0-a2a5-000a68d9bb7a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T20:06:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc00d916-30f9-43b0-a2a5-000a68d9bb7a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-de7f75"} {"level":"debug","ts":"2026-07-06T20:06:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc00d916-30f9-43b0-a2a5-000a68d9bb7a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:06:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cc00d916-30f9-43b0-a2a5-000a68d9bb7a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-06T20:06:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc00d916-30f9-43b0-a2a5-000a68d9bb7a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:06:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc00d916-30f9-43b0-a2a5-000a68d9bb7a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:06:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ec0f8adfb8cb52739ad92867e1ac522d5efb475cbfd7f80fcc0e6a08544cd2f"} {"level":"info","ts":"2026-07-06T20:06:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ee030367ebca85a6797cf53a43cadee9d28ea4d93b72d34b7b328314d6996e9"} {"level":"info","ts":"2026-07-06T20:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d681e1b7279fa604f0de485972448b2474fa95d564bb0977d662b9937aaebc65"} {"level":"info","ts":"2026-07-06T20:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/492502fe93d58843fb24cf7deea3b1d3d734a8c2e1e1e9ee3aa7a1fe99b9b5fa"} {"level":"info","ts":"2026-07-06T20:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e7b3ef9dd59414b7037b3ecd269dc9678dadc5ffc3b9ee399674f662e4f8c901"} {"level":"info","ts":"2026-07-06T20:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5d7cc3527e9d6575d1be3496545b2565087148fef2d3fe2eb6f09230bd159e5"} {"level":"info","ts":"2026-07-06T20:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11d9ed101d8e04f622f80a7028893c7dd36e0b9d4a327e1e08aad3f8fd6fe06c"} {"level":"info","ts":"2026-07-06T20:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5986f0b4b3465ab5fa3b1ee6b1c1c0e82c0f75f41bb950b7eb8b1184d32f129"} {"level":"info","ts":"2026-07-06T20:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14b8e21143f9fb6cd4dce81d93b6f0c78c1003ad16e46aa279d461424886ee39"} {"level":"info","ts":"2026-07-06T20:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/297fcfd41c18d02cd340bd6cdab5244738fd53423619389e756dedf5637d1cc4"} {"level":"info","ts":"2026-07-06T20:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/259865292e5db84dd65dcc3e272ee2cb4cc8365358b87863b6b50c4ec75a78ad"} {"level":"info","ts":"2026-07-06T20:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1999ca939c9d5a0586171e3d6a00c89c9a25fa2ddfe4e1c61c7825bac2e03a8"} {"level":"info","ts":"2026-07-06T20:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/79cd834a114f5be2fe36485e8fff908be0059a1b3c570b9cf85d66353399d7e3"} {"level":"info","ts":"2026-07-06T20:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d77d84d5a17e31b1e5a596a424cfdc87b4361751ea6124a41289f61e577cf67"} {"level":"info","ts":"2026-07-06T20:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/252f14c84d5724ce9823ff48cb17375b2cac8327b4fdc985205194c6cdcd40c2"} {"level":"info","ts":"2026-07-06T20:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0c2b2d3ad6c69697a314035d2fffd4999283ba21aa042ef8e9926dc5d7aa064"} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"290b320ce951b841f0d8387a9eb38f73e3d84b5007475d08d79798df2095f086","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"290b320ce951b841f0d8387a9eb38f73e3d84b5007475d08d79798df2095f086","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"290b320ce951b841f0d8387a9eb38f73e3d84b5007475d08d79798df2095f086","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"290b320ce951b841f0d8387a9eb38f73e3d84b5007475d08d79798df2095f086","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/290b320ce951b841f0d8387a9eb38f73e3d84b5007475d08d79798df2095f086"} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"290b320ce951b841f0d8387a9eb38f73e3d84b5007475d08d79798df2095f086","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/290b320ce951b841f0d8387a9eb38f73e3d84b5007475d08d79798df2095f086"} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"290b320ce951b841f0d8387a9eb38f73e3d84b5007475d08d79798df2095f086","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["290b320ce951b841f0d8387a9eb38f73e3d84b5007475d08d79798df2095f086"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"290b320ce951b841f0d8387a9eb38f73e3d84b5007475d08d79798df2095f086","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"290b320ce951b841f0d8387a9eb38f73e3d84b5007475d08d79798df2095f086","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"def516e707d51fc2a156d3101540aba891ce54cc2f9bf5670779d03842449228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"def516e707d51fc2a156d3101540aba891ce54cc2f9bf5670779d03842449228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"def516e707d51fc2a156d3101540aba891ce54cc2f9bf5670779d03842449228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"def516e707d51fc2a156d3101540aba891ce54cc2f9bf5670779d03842449228","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/290b320ce951b841f0d8387a9eb38f73e3d84b5007475d08d79798df2095f086"} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"def516e707d51fc2a156d3101540aba891ce54cc2f9bf5670779d03842449228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/def516e707d51fc2a156d3101540aba891ce54cc2f9bf5670779d03842449228"} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"def516e707d51fc2a156d3101540aba891ce54cc2f9bf5670779d03842449228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"def516e707d51fc2a156d3101540aba891ce54cc2f9bf5670779d03842449228","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/def516e707d51fc2a156d3101540aba891ce54cc2f9bf5670779d03842449228"} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d3e1309ad2453908b7e37610ecf2cf4d622d278acdc324aa47f5e7de5ca171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d3e1309ad2453908b7e37610ecf2cf4d622d278acdc324aa47f5e7de5ca171","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"def516e707d51fc2a156d3101540aba891ce54cc2f9bf5670779d03842449228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["def516e707d51fc2a156d3101540aba891ce54cc2f9bf5670779d03842449228"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29d3e1309ad2453908b7e37610ecf2cf4d622d278acdc324aa47f5e7de5ca171"} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"def516e707d51fc2a156d3101540aba891ce54cc2f9bf5670779d03842449228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2b5339d2ba89f10d7adccec81a4ce005fb061b1ec4b7ab1991b413391949d69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2b5339d2ba89f10d7adccec81a4ce005fb061b1ec4b7ab1991b413391949d69"} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2b5339d2ba89f10d7adccec81a4ce005fb061b1ec4b7ab1991b413391949d69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d3e1309ad2453908b7e37610ecf2cf4d622d278acdc324aa47f5e7de5ca171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d3e1309ad2453908b7e37610ecf2cf4d622d278acdc324aa47f5e7de5ca171","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"def516e707d51fc2a156d3101540aba891ce54cc2f9bf5670779d03842449228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2b5339d2ba89f10d7adccec81a4ce005fb061b1ec4b7ab1991b413391949d69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2b5339d2ba89f10d7adccec81a4ce005fb061b1ec4b7ab1991b413391949d69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29d3e1309ad2453908b7e37610ecf2cf4d622d278acdc324aa47f5e7de5ca171"} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2b5339d2ba89f10d7adccec81a4ce005fb061b1ec4b7ab1991b413391949d69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d3e1309ad2453908b7e37610ecf2cf4d622d278acdc324aa47f5e7de5ca171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29d3e1309ad2453908b7e37610ecf2cf4d622d278acdc324aa47f5e7de5ca171"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/def516e707d51fc2a156d3101540aba891ce54cc2f9bf5670779d03842449228"} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d3e1309ad2453908b7e37610ecf2cf4d622d278acdc324aa47f5e7de5ca171","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2b5339d2ba89f10d7adccec81a4ce005fb061b1ec4b7ab1991b413391949d69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2b5339d2ba89f10d7adccec81a4ce005fb061b1ec4b7ab1991b413391949d69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29d3e1309ad2453908b7e37610ecf2cf4d622d278acdc324aa47f5e7de5ca171","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2b5339d2ba89f10d7adccec81a4ce005fb061b1ec4b7ab1991b413391949d69","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2b5339d2ba89f10d7adccec81a4ce005fb061b1ec4b7ab1991b413391949d69"} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2b5339d2ba89f10d7adccec81a4ce005fb061b1ec4b7ab1991b413391949d69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2b5339d2ba89f10d7adccec81a4ce005fb061b1ec4b7ab1991b413391949d69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2b5339d2ba89f10d7adccec81a4ce005fb061b1ec4b7ab1991b413391949d69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2b5339d2ba89f10d7adccec81a4ce005fb061b1ec4b7ab1991b413391949d69","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29d3e1309ad2453908b7e37610ecf2cf4d622d278acdc324aa47f5e7de5ca171"} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2b5339d2ba89f10d7adccec81a4ce005fb061b1ec4b7ab1991b413391949d69"} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0c0348cbe003847fe743a0716992eeb78127ee5578791b376172400fa288701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0c0348cbe003847fe743a0716992eeb78127ee5578791b376172400fa288701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0c0348cbe003847fe743a0716992eeb78127ee5578791b376172400fa288701","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0c0348cbe003847fe743a0716992eeb78127ee5578791b376172400fa288701"} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0c0348cbe003847fe743a0716992eeb78127ee5578791b376172400fa288701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0c0348cbe003847fe743a0716992eeb78127ee5578791b376172400fa288701","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0c0348cbe003847fe743a0716992eeb78127ee5578791b376172400fa288701"} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0c0348cbe003847fe743a0716992eeb78127ee5578791b376172400fa288701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0c0348cbe003847fe743a0716992eeb78127ee5578791b376172400fa288701"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0c0348cbe003847fe743a0716992eeb78127ee5578791b376172400fa288701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0c0348cbe003847fe743a0716992eeb78127ee5578791b376172400fa288701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0c0348cbe003847fe743a0716992eeb78127ee5578791b376172400fa288701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917c9cdbe6bf81df624e3d56400711c1a865428d6dc1f82e39eec2a2064eff6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0c0348cbe003847fe743a0716992eeb78127ee5578791b376172400fa288701"} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917c9cdbe6bf81df624e3d56400711c1a865428d6dc1f82e39eec2a2064eff6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0c0348cbe003847fe743a0716992eeb78127ee5578791b376172400fa288701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0c0348cbe003847fe743a0716992eeb78127ee5578791b376172400fa288701"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917c9cdbe6bf81df624e3d56400711c1a865428d6dc1f82e39eec2a2064eff6a"} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0c0348cbe003847fe743a0716992eeb78127ee5578791b376172400fa288701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2abae5c914b5576bc83dc29ec7de5e0db864035f0b326074c70eeeb0460e9475","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2abae5c914b5576bc83dc29ec7de5e0db864035f0b326074c70eeeb0460e9475"} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2abae5c914b5576bc83dc29ec7de5e0db864035f0b326074c70eeeb0460e9475","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917c9cdbe6bf81df624e3d56400711c1a865428d6dc1f82e39eec2a2064eff6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["917c9cdbe6bf81df624e3d56400711c1a865428d6dc1f82e39eec2a2064eff6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917c9cdbe6bf81df624e3d56400711c1a865428d6dc1f82e39eec2a2064eff6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2e0629df8bcd4689b23bc0344fa8d56b4364023d209a80c806cab8d31333583","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0c0348cbe003847fe743a0716992eeb78127ee5578791b376172400fa288701"} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2e0629df8bcd4689b23bc0344fa8d56b4364023d209a80c806cab8d31333583","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0c0348cbe003847fe743a0716992eeb78127ee5578791b376172400fa288701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2abae5c914b5576bc83dc29ec7de5e0db864035f0b326074c70eeeb0460e9475","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2abae5c914b5576bc83dc29ec7de5e0db864035f0b326074c70eeeb0460e9475"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2e0629df8bcd4689b23bc0344fa8d56b4364023d209a80c806cab8d31333583"} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2abae5c914b5576bc83dc29ec7de5e0db864035f0b326074c70eeeb0460e9475","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917c9cdbe6bf81df624e3d56400711c1a865428d6dc1f82e39eec2a2064eff6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917c9cdbe6bf81df624e3d56400711c1a865428d6dc1f82e39eec2a2064eff6a"} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917c9cdbe6bf81df624e3d56400711c1a865428d6dc1f82e39eec2a2064eff6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2e0629df8bcd4689b23bc0344fa8d56b4364023d209a80c806cab8d31333583","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2e0629df8bcd4689b23bc0344fa8d56b4364023d209a80c806cab8d31333583"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2e0629df8bcd4689b23bc0344fa8d56b4364023d209a80c806cab8d31333583","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2abae5c914b5576bc83dc29ec7de5e0db864035f0b326074c70eeeb0460e9475","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2abae5c914b5576bc83dc29ec7de5e0db864035f0b326074c70eeeb0460e9475"} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2abae5c914b5576bc83dc29ec7de5e0db864035f0b326074c70eeeb0460e9475","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917c9cdbe6bf81df624e3d56400711c1a865428d6dc1f82e39eec2a2064eff6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["917c9cdbe6bf81df624e3d56400711c1a865428d6dc1f82e39eec2a2064eff6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917c9cdbe6bf81df624e3d56400711c1a865428d6dc1f82e39eec2a2064eff6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2e0629df8bcd4689b23bc0344fa8d56b4364023d209a80c806cab8d31333583","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2e0629df8bcd4689b23bc0344fa8d56b4364023d209a80c806cab8d31333583"} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2e0629df8bcd4689b23bc0344fa8d56b4364023d209a80c806cab8d31333583","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2abae5c914b5576bc83dc29ec7de5e0db864035f0b326074c70eeeb0460e9475","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2abae5c914b5576bc83dc29ec7de5e0db864035f0b326074c70eeeb0460e9475"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2abae5c914b5576bc83dc29ec7de5e0db864035f0b326074c70eeeb0460e9475","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917c9cdbe6bf81df624e3d56400711c1a865428d6dc1f82e39eec2a2064eff6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917c9cdbe6bf81df624e3d56400711c1a865428d6dc1f82e39eec2a2064eff6a"} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917c9cdbe6bf81df624e3d56400711c1a865428d6dc1f82e39eec2a2064eff6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2e0629df8bcd4689b23bc0344fa8d56b4364023d209a80c806cab8d31333583","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2e0629df8bcd4689b23bc0344fa8d56b4364023d209a80c806cab8d31333583"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2abae5c914b5576bc83dc29ec7de5e0db864035f0b326074c70eeeb0460e9475"} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2e0629df8bcd4689b23bc0344fa8d56b4364023d209a80c806cab8d31333583","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2abae5c914b5576bc83dc29ec7de5e0db864035f0b326074c70eeeb0460e9475","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917c9cdbe6bf81df624e3d56400711c1a865428d6dc1f82e39eec2a2064eff6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["917c9cdbe6bf81df624e3d56400711c1a865428d6dc1f82e39eec2a2064eff6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917c9cdbe6bf81df624e3d56400711c1a865428d6dc1f82e39eec2a2064eff6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2e0629df8bcd4689b23bc0344fa8d56b4364023d209a80c806cab8d31333583","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2e0629df8bcd4689b23bc0344fa8d56b4364023d209a80c806cab8d31333583"} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2e0629df8bcd4689b23bc0344fa8d56b4364023d209a80c806cab8d31333583","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917c9cdbe6bf81df624e3d56400711c1a865428d6dc1f82e39eec2a2064eff6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917c9cdbe6bf81df624e3d56400711c1a865428d6dc1f82e39eec2a2064eff6a"} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917c9cdbe6bf81df624e3d56400711c1a865428d6dc1f82e39eec2a2064eff6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2e0629df8bcd4689b23bc0344fa8d56b4364023d209a80c806cab8d31333583","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917c9cdbe6bf81df624e3d56400711c1a865428d6dc1f82e39eec2a2064eff6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["917c9cdbe6bf81df624e3d56400711c1a865428d6dc1f82e39eec2a2064eff6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917c9cdbe6bf81df624e3d56400711c1a865428d6dc1f82e39eec2a2064eff6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2e0629df8bcd4689b23bc0344fa8d56b4364023d209a80c806cab8d31333583","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917c9cdbe6bf81df624e3d56400711c1a865428d6dc1f82e39eec2a2064eff6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["917c9cdbe6bf81df624e3d56400711c1a865428d6dc1f82e39eec2a2064eff6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2e0629df8bcd4689b23bc0344fa8d56b4364023d209a80c806cab8d31333583"} {"level":"error","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"917c9cdbe6bf81df624e3d56400711c1a865428d6dc1f82e39eec2a2064eff6a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"917c9cdbe6bf81df624e3d56400711c1a865428d6dc1f82e39eec2a2064eff6a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T20:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917c9cdbe6bf81df624e3d56400711c1a865428d6dc1f82e39eec2a2064eff6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917c9cdbe6bf81df624e3d56400711c1a865428d6dc1f82e39eec2a2064eff6a"} {"level":"info","ts":"2026-07-06T20:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917c9cdbe6bf81df624e3d56400711c1a865428d6dc1f82e39eec2a2064eff6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2e0629df8bcd4689b23bc0344fa8d56b4364023d209a80c806cab8d31333583","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2e0629df8bcd4689b23bc0344fa8d56b4364023d209a80c806cab8d31333583"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2e0629df8bcd4689b23bc0344fa8d56b4364023d209a80c806cab8d31333583","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917c9cdbe6bf81df624e3d56400711c1a865428d6dc1f82e39eec2a2064eff6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2e0629df8bcd4689b23bc0344fa8d56b4364023d209a80c806cab8d31333583","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917c9cdbe6bf81df624e3d56400711c1a865428d6dc1f82e39eec2a2064eff6a"} {"level":"debug","ts":"2026-07-06T20:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917c9cdbe6bf81df624e3d56400711c1a865428d6dc1f82e39eec2a2064eff6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["917c9cdbe6bf81df624e3d56400711c1a865428d6dc1f82e39eec2a2064eff6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2e0629df8bcd4689b23bc0344fa8d56b4364023d209a80c806cab8d31333583"} {"level":"info","ts":"2026-07-06T20:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917c9cdbe6bf81df624e3d56400711c1a865428d6dc1f82e39eec2a2064eff6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917c9cdbe6bf81df624e3d56400711c1a865428d6dc1f82e39eec2a2064eff6a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917c9cdbe6bf81df624e3d56400711c1a865428d6dc1f82e39eec2a2064eff6a"} {"level":"debug","ts":"2026-07-06T20:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1296704c67634f660e8e2d8c0e41b4c684be88f0fb47a8abc2130efc8f64b65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1296704c67634f660e8e2d8c0e41b4c684be88f0fb47a8abc2130efc8f64b65","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1296704c67634f660e8e2d8c0e41b4c684be88f0fb47a8abc2130efc8f64b65"} {"level":"debug","ts":"2026-07-06T20:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1296704c67634f660e8e2d8c0e41b4c684be88f0fb47a8abc2130efc8f64b65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1296704c67634f660e8e2d8c0e41b4c684be88f0fb47a8abc2130efc8f64b65","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1296704c67634f660e8e2d8c0e41b4c684be88f0fb47a8abc2130efc8f64b65"} {"level":"debug","ts":"2026-07-06T20:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1296704c67634f660e8e2d8c0e41b4c684be88f0fb47a8abc2130efc8f64b65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1296704c67634f660e8e2d8c0e41b4c684be88f0fb47a8abc2130efc8f64b65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1296704c67634f660e8e2d8c0e41b4c684be88f0fb47a8abc2130efc8f64b65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1296704c67634f660e8e2d8c0e41b4c684be88f0fb47a8abc2130efc8f64b65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1296704c67634f660e8e2d8c0e41b4c684be88f0fb47a8abc2130efc8f64b65"} {"level":"info","ts":"2026-07-06T20:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1296704c67634f660e8e2d8c0e41b4c684be88f0fb47a8abc2130efc8f64b65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"badd6bbe9a556241a785aca61d5f91a90e8035f33e6c3313f7ab550d0dac07e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/badd6bbe9a556241a785aca61d5f91a90e8035f33e6c3313f7ab550d0dac07e3"} {"level":"info","ts":"2026-07-06T20:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"badd6bbe9a556241a785aca61d5f91a90e8035f33e6c3313f7ab550d0dac07e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1296704c67634f660e8e2d8c0e41b4c684be88f0fb47a8abc2130efc8f64b65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"badd6bbe9a556241a785aca61d5f91a90e8035f33e6c3313f7ab550d0dac07e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["badd6bbe9a556241a785aca61d5f91a90e8035f33e6c3313f7ab550d0dac07e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1296704c67634f660e8e2d8c0e41b4c684be88f0fb47a8abc2130efc8f64b65"} {"level":"info","ts":"2026-07-06T20:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"badd6bbe9a556241a785aca61d5f91a90e8035f33e6c3313f7ab550d0dac07e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1296704c67634f660e8e2d8c0e41b4c684be88f0fb47a8abc2130efc8f64b65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1296704c67634f660e8e2d8c0e41b4c684be88f0fb47a8abc2130efc8f64b65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/badd6bbe9a556241a785aca61d5f91a90e8035f33e6c3313f7ab550d0dac07e3"} {"level":"info","ts":"2026-07-06T20:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1296704c67634f660e8e2d8c0e41b4c684be88f0fb47a8abc2130efc8f64b65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"badd6bbe9a556241a785aca61d5f91a90e8035f33e6c3313f7ab550d0dac07e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/badd6bbe9a556241a785aca61d5f91a90e8035f33e6c3313f7ab550d0dac07e3"} {"level":"info","ts":"2026-07-06T20:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"badd6bbe9a556241a785aca61d5f91a90e8035f33e6c3313f7ab550d0dac07e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1296704c67634f660e8e2d8c0e41b4c684be88f0fb47a8abc2130efc8f64b65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1296704c67634f660e8e2d8c0e41b4c684be88f0fb47a8abc2130efc8f64b65"} {"level":"info","ts":"2026-07-06T20:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1296704c67634f660e8e2d8c0e41b4c684be88f0fb47a8abc2130efc8f64b65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"badd6bbe9a556241a785aca61d5f91a90e8035f33e6c3313f7ab550d0dac07e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5307dde013cc7ae69cf88219cb8b58cdd211ff4817d091db8171f4b68c9a5fe3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/badd6bbe9a556241a785aca61d5f91a90e8035f33e6c3313f7ab550d0dac07e3"} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5307dde013cc7ae69cf88219cb8b58cdd211ff4817d091db8171f4b68c9a5fe3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1296704c67634f660e8e2d8c0e41b4c684be88f0fb47a8abc2130efc8f64b65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1296704c67634f660e8e2d8c0e41b4c684be88f0fb47a8abc2130efc8f64b65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5307dde013cc7ae69cf88219cb8b58cdd211ff4817d091db8171f4b68c9a5fe3"} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1296704c67634f660e8e2d8c0e41b4c684be88f0fb47a8abc2130efc8f64b65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"badd6bbe9a556241a785aca61d5f91a90e8035f33e6c3313f7ab550d0dac07e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["badd6bbe9a556241a785aca61d5f91a90e8035f33e6c3313f7ab550d0dac07e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"badd6bbe9a556241a785aca61d5f91a90e8035f33e6c3313f7ab550d0dac07e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5307dde013cc7ae69cf88219cb8b58cdd211ff4817d091db8171f4b68c9a5fe3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5307dde013cc7ae69cf88219cb8b58cdd211ff4817d091db8171f4b68c9a5fe3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1296704c67634f660e8e2d8c0e41b4c684be88f0fb47a8abc2130efc8f64b65"} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5307dde013cc7ae69cf88219cb8b58cdd211ff4817d091db8171f4b68c9a5fe3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1296704c67634f660e8e2d8c0e41b4c684be88f0fb47a8abc2130efc8f64b65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"badd6bbe9a556241a785aca61d5f91a90e8035f33e6c3313f7ab550d0dac07e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5307dde013cc7ae69cf88219cb8b58cdd211ff4817d091db8171f4b68c9a5fe3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5307dde013cc7ae69cf88219cb8b58cdd211ff4817d091db8171f4b68c9a5fe3"} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5307dde013cc7ae69cf88219cb8b58cdd211ff4817d091db8171f4b68c9a5fe3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5307dde013cc7ae69cf88219cb8b58cdd211ff4817d091db8171f4b68c9a5fe3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5307dde013cc7ae69cf88219cb8b58cdd211ff4817d091db8171f4b68c9a5fe3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/badd6bbe9a556241a785aca61d5f91a90e8035f33e6c3313f7ab550d0dac07e3"} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5307dde013cc7ae69cf88219cb8b58cdd211ff4817d091db8171f4b68c9a5fe3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5307dde013cc7ae69cf88219cb8b58cdd211ff4817d091db8171f4b68c9a5fe3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5307dde013cc7ae69cf88219cb8b58cdd211ff4817d091db8171f4b68c9a5fe3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1296704c67634f660e8e2d8c0e41b4c684be88f0fb47a8abc2130efc8f64b65"} {"level":"error","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5307dde013cc7ae69cf88219cb8b58cdd211ff4817d091db8171f4b68c9a5fe3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5307dde013cc7ae69cf88219cb8b58cdd211ff4817d091db8171f4b68c9a5fe3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5307dde013cc7ae69cf88219cb8b58cdd211ff4817d091db8171f4b68c9a5fe3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5307dde013cc7ae69cf88219cb8b58cdd211ff4817d091db8171f4b68c9a5fe3"} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5307dde013cc7ae69cf88219cb8b58cdd211ff4817d091db8171f4b68c9a5fe3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5307dde013cc7ae69cf88219cb8b58cdd211ff4817d091db8171f4b68c9a5fe3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5307dde013cc7ae69cf88219cb8b58cdd211ff4817d091db8171f4b68c9a5fe3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"849b8576d09fc6956c7abd26f214bad58390c27c91299f31eec49298b0fe02e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5307dde013cc7ae69cf88219cb8b58cdd211ff4817d091db8171f4b68c9a5fe3"} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/849b8576d09fc6956c7abd26f214bad58390c27c91299f31eec49298b0fe02e4"} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"849b8576d09fc6956c7abd26f214bad58390c27c91299f31eec49298b0fe02e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d12f299d9d488ac6c991f070ff35a8636d45d9354a7c4dfc7e838692c5233a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d12f299d9d488ac6c991f070ff35a8636d45d9354a7c4dfc7e838692c5233a85"} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d12f299d9d488ac6c991f070ff35a8636d45d9354a7c4dfc7e838692c5233a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"849b8576d09fc6956c7abd26f214bad58390c27c91299f31eec49298b0fe02e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/849b8576d09fc6956c7abd26f214bad58390c27c91299f31eec49298b0fe02e4"} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"849b8576d09fc6956c7abd26f214bad58390c27c91299f31eec49298b0fe02e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5307dde013cc7ae69cf88219cb8b58cdd211ff4817d091db8171f4b68c9a5fe3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5307dde013cc7ae69cf88219cb8b58cdd211ff4817d091db8171f4b68c9a5fe3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d12f299d9d488ac6c991f070ff35a8636d45d9354a7c4dfc7e838692c5233a85"} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5307dde013cc7ae69cf88219cb8b58cdd211ff4817d091db8171f4b68c9a5fe3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d12f299d9d488ac6c991f070ff35a8636d45d9354a7c4dfc7e838692c5233a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d12f299d9d488ac6c991f070ff35a8636d45d9354a7c4dfc7e838692c5233a85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/849b8576d09fc6956c7abd26f214bad58390c27c91299f31eec49298b0fe02e4"} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d12f299d9d488ac6c991f070ff35a8636d45d9354a7c4dfc7e838692c5233a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"849b8576d09fc6956c7abd26f214bad58390c27c91299f31eec49298b0fe02e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["849b8576d09fc6956c7abd26f214bad58390c27c91299f31eec49298b0fe02e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5307dde013cc7ae69cf88219cb8b58cdd211ff4817d091db8171f4b68c9a5fe3"} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"849b8576d09fc6956c7abd26f214bad58390c27c91299f31eec49298b0fe02e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5307dde013cc7ae69cf88219cb8b58cdd211ff4817d091db8171f4b68c9a5fe3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"912c6413620c7beb5f3d4355ebe6e2852a335d67113bbb6167ad6bbd9aadf5bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/912c6413620c7beb5f3d4355ebe6e2852a335d67113bbb6167ad6bbd9aadf5bb"} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"912c6413620c7beb5f3d4355ebe6e2852a335d67113bbb6167ad6bbd9aadf5bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d12f299d9d488ac6c991f070ff35a8636d45d9354a7c4dfc7e838692c5233a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d12f299d9d488ac6c991f070ff35a8636d45d9354a7c4dfc7e838692c5233a85"} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d12f299d9d488ac6c991f070ff35a8636d45d9354a7c4dfc7e838692c5233a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"849b8576d09fc6956c7abd26f214bad58390c27c91299f31eec49298b0fe02e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/849b8576d09fc6956c7abd26f214bad58390c27c91299f31eec49298b0fe02e4"} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"849b8576d09fc6956c7abd26f214bad58390c27c91299f31eec49298b0fe02e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"912c6413620c7beb5f3d4355ebe6e2852a335d67113bbb6167ad6bbd9aadf5bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d12f299d9d488ac6c991f070ff35a8636d45d9354a7c4dfc7e838692c5233a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d12f299d9d488ac6c991f070ff35a8636d45d9354a7c4dfc7e838692c5233a85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d12f299d9d488ac6c991f070ff35a8636d45d9354a7c4dfc7e838692c5233a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"849b8576d09fc6956c7abd26f214bad58390c27c91299f31eec49298b0fe02e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["849b8576d09fc6956c7abd26f214bad58390c27c91299f31eec49298b0fe02e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/912c6413620c7beb5f3d4355ebe6e2852a335d67113bbb6167ad6bbd9aadf5bb"} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"849b8576d09fc6956c7abd26f214bad58390c27c91299f31eec49298b0fe02e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"912c6413620c7beb5f3d4355ebe6e2852a335d67113bbb6167ad6bbd9aadf5bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["912c6413620c7beb5f3d4355ebe6e2852a335d67113bbb6167ad6bbd9aadf5bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"912c6413620c7beb5f3d4355ebe6e2852a335d67113bbb6167ad6bbd9aadf5bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d12f299d9d488ac6c991f070ff35a8636d45d9354a7c4dfc7e838692c5233a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d12f299d9d488ac6c991f070ff35a8636d45d9354a7c4dfc7e838692c5233a85"} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d12f299d9d488ac6c991f070ff35a8636d45d9354a7c4dfc7e838692c5233a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"849b8576d09fc6956c7abd26f214bad58390c27c91299f31eec49298b0fe02e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"849b8576d09fc6956c7abd26f214bad58390c27c91299f31eec49298b0fe02e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"912c6413620c7beb5f3d4355ebe6e2852a335d67113bbb6167ad6bbd9aadf5bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d12f299d9d488ac6c991f070ff35a8636d45d9354a7c4dfc7e838692c5233a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d12f299d9d488ac6c991f070ff35a8636d45d9354a7c4dfc7e838692c5233a85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/849b8576d09fc6956c7abd26f214bad58390c27c91299f31eec49298b0fe02e4"} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d12f299d9d488ac6c991f070ff35a8636d45d9354a7c4dfc7e838692c5233a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"761e2188ef2e10243dafd1b19aa00e8df918379f2c189f4dda173968d3016bf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/912c6413620c7beb5f3d4355ebe6e2852a335d67113bbb6167ad6bbd9aadf5bb"} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"761e2188ef2e10243dafd1b19aa00e8df918379f2c189f4dda173968d3016bf6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"849b8576d09fc6956c7abd26f214bad58390c27c91299f31eec49298b0fe02e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["849b8576d09fc6956c7abd26f214bad58390c27c91299f31eec49298b0fe02e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d12f299d9d488ac6c991f070ff35a8636d45d9354a7c4dfc7e838692c5233a85"} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"849b8576d09fc6956c7abd26f214bad58390c27c91299f31eec49298b0fe02e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d12f299d9d488ac6c991f070ff35a8636d45d9354a7c4dfc7e838692c5233a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"761e2188ef2e10243dafd1b19aa00e8df918379f2c189f4dda173968d3016bf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/761e2188ef2e10243dafd1b19aa00e8df918379f2c189f4dda173968d3016bf6"} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"761e2188ef2e10243dafd1b19aa00e8df918379f2c189f4dda173968d3016bf6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"849b8576d09fc6956c7abd26f214bad58390c27c91299f31eec49298b0fe02e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"849b8576d09fc6956c7abd26f214bad58390c27c91299f31eec49298b0fe02e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"761e2188ef2e10243dafd1b19aa00e8df918379f2c189f4dda173968d3016bf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["761e2188ef2e10243dafd1b19aa00e8df918379f2c189f4dda173968d3016bf6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/849b8576d09fc6956c7abd26f214bad58390c27c91299f31eec49298b0fe02e4"} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"761e2188ef2e10243dafd1b19aa00e8df918379f2c189f4dda173968d3016bf6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55a73da7d30d36c6a6474dffce6967c9483b68008b42ade57c4e9dccb75533ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/761e2188ef2e10243dafd1b19aa00e8df918379f2c189f4dda173968d3016bf6"} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55a73da7d30d36c6a6474dffce6967c9483b68008b42ade57c4e9dccb75533ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"849b8576d09fc6956c7abd26f214bad58390c27c91299f31eec49298b0fe02e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["849b8576d09fc6956c7abd26f214bad58390c27c91299f31eec49298b0fe02e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55a73da7d30d36c6a6474dffce6967c9483b68008b42ade57c4e9dccb75533ff"} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"849b8576d09fc6956c7abd26f214bad58390c27c91299f31eec49298b0fe02e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"761e2188ef2e10243dafd1b19aa00e8df918379f2c189f4dda173968d3016bf6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55a73da7d30d36c6a6474dffce6967c9483b68008b42ade57c4e9dccb75533ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55a73da7d30d36c6a6474dffce6967c9483b68008b42ade57c4e9dccb75533ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/849b8576d09fc6956c7abd26f214bad58390c27c91299f31eec49298b0fe02e4"} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55a73da7d30d36c6a6474dffce6967c9483b68008b42ade57c4e9dccb75533ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"849b8576d09fc6956c7abd26f214bad58390c27c91299f31eec49298b0fe02e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55a73da7d30d36c6a6474dffce6967c9483b68008b42ade57c4e9dccb75533ff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/761e2188ef2e10243dafd1b19aa00e8df918379f2c189f4dda173968d3016bf6"} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55a73da7d30d36c6a6474dffce6967c9483b68008b42ade57c4e9dccb75533ff"} {"level":"info","ts":"2026-07-06T20:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/849b8576d09fc6956c7abd26f214bad58390c27c91299f31eec49298b0fe02e4"} {"level":"debug","ts":"2026-07-06T20:07:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"badd6bbe9a556241a785aca61d5f91a90e8035f33e6c3313f7ab550d0dac07e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"badd6bbe9a556241a785aca61d5f91a90e8035f33e6c3313f7ab550d0dac07e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"badd6bbe9a556241a785aca61d5f91a90e8035f33e6c3313f7ab550d0dac07e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"badd6bbe9a556241a785aca61d5f91a90e8035f33e6c3313f7ab550d0dac07e3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/badd6bbe9a556241a785aca61d5f91a90e8035f33e6c3313f7ab550d0dac07e3"} {"level":"debug","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"badd6bbe9a556241a785aca61d5f91a90e8035f33e6c3313f7ab550d0dac07e3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/badd6bbe9a556241a785aca61d5f91a90e8035f33e6c3313f7ab550d0dac07e3"} {"level":"debug","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"badd6bbe9a556241a785aca61d5f91a90e8035f33e6c3313f7ab550d0dac07e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["badd6bbe9a556241a785aca61d5f91a90e8035f33e6c3313f7ab550d0dac07e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"badd6bbe9a556241a785aca61d5f91a90e8035f33e6c3313f7ab550d0dac07e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"badd6bbe9a556241a785aca61d5f91a90e8035f33e6c3313f7ab550d0dac07e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2abae5c914b5576bc83dc29ec7de5e0db864035f0b326074c70eeeb0460e9475","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/badd6bbe9a556241a785aca61d5f91a90e8035f33e6c3313f7ab550d0dac07e3"} {"level":"info","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2abae5c914b5576bc83dc29ec7de5e0db864035f0b326074c70eeeb0460e9475"} {"level":"debug","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2b5339d2ba89f10d7adccec81a4ce005fb061b1ec4b7ab1991b413391949d69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2b5339d2ba89f10d7adccec81a4ce005fb061b1ec4b7ab1991b413391949d69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2b5339d2ba89f10d7adccec81a4ce005fb061b1ec4b7ab1991b413391949d69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2b5339d2ba89f10d7adccec81a4ce005fb061b1ec4b7ab1991b413391949d69","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2b5339d2ba89f10d7adccec81a4ce005fb061b1ec4b7ab1991b413391949d69"} {"level":"debug","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2b5339d2ba89f10d7adccec81a4ce005fb061b1ec4b7ab1991b413391949d69","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2b5339d2ba89f10d7adccec81a4ce005fb061b1ec4b7ab1991b413391949d69"} {"level":"debug","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2b5339d2ba89f10d7adccec81a4ce005fb061b1ec4b7ab1991b413391949d69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2b5339d2ba89f10d7adccec81a4ce005fb061b1ec4b7ab1991b413391949d69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2b5339d2ba89f10d7adccec81a4ce005fb061b1ec4b7ab1991b413391949d69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2b5339d2ba89f10d7adccec81a4ce005fb061b1ec4b7ab1991b413391949d69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca0dae68b105c77c6f296c772c69173ff9d09be44eafb8e0d69212bb214b7c3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917c9cdbe6bf81df624e3d56400711c1a865428d6dc1f82e39eec2a2064eff6a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2b5339d2ba89f10d7adccec81a4ce005fb061b1ec4b7ab1991b413391949d69"} {"level":"info","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca0dae68b105c77c6f296c772c69173ff9d09be44eafb8e0d69212bb214b7c3e"} {"level":"info","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917c9cdbe6bf81df624e3d56400711c1a865428d6dc1f82e39eec2a2064eff6a"} {"level":"debug","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22"} {"level":"debug","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22"} {"level":"debug","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55a73da7d30d36c6a6474dffce6967c9483b68008b42ade57c4e9dccb75533ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55a73da7d30d36c6a6474dffce6967c9483b68008b42ade57c4e9dccb75533ff"} {"level":"info","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55a73da7d30d36c6a6474dffce6967c9483b68008b42ade57c4e9dccb75533ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d12f299d9d488ac6c991f070ff35a8636d45d9354a7c4dfc7e838692c5233a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55a73da7d30d36c6a6474dffce6967c9483b68008b42ade57c4e9dccb75533ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55a73da7d30d36c6a6474dffce6967c9483b68008b42ade57c4e9dccb75533ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22"} {"level":"info","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55a73da7d30d36c6a6474dffce6967c9483b68008b42ade57c4e9dccb75533ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d12f299d9d488ac6c991f070ff35a8636d45d9354a7c4dfc7e838692c5233a85"} {"level":"info","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55a73da7d30d36c6a6474dffce6967c9483b68008b42ade57c4e9dccb75533ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55a73da7d30d36c6a6474dffce6967c9483b68008b42ade57c4e9dccb75533ff"} {"level":"info","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55a73da7d30d36c6a6474dffce6967c9483b68008b42ade57c4e9dccb75533ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22"} {"level":"info","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55a73da7d30d36c6a6474dffce6967c9483b68008b42ade57c4e9dccb75533ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0130525c65d3d7e634a1666a16c850b7e5c37ef5470c76545b82aa0120261808","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55a73da7d30d36c6a6474dffce6967c9483b68008b42ade57c4e9dccb75533ff"} {"level":"info","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"912c6413620c7beb5f3d4355ebe6e2852a335d67113bbb6167ad6bbd9aadf5bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55a73da7d30d36c6a6474dffce6967c9483b68008b42ade57c4e9dccb75533ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55a73da7d30d36c6a6474dffce6967c9483b68008b42ade57c4e9dccb75533ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55a73da7d30d36c6a6474dffce6967c9483b68008b42ade57c4e9dccb75533ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55a73da7d30d36c6a6474dffce6967c9483b68008b42ade57c4e9dccb75533ff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0130525c65d3d7e634a1666a16c850b7e5c37ef5470c76545b82aa0120261808"} {"level":"info","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22"} {"level":"info","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/912c6413620c7beb5f3d4355ebe6e2852a335d67113bbb6167ad6bbd9aadf5bb"} {"level":"debug","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"849b8576d09fc6956c7abd26f214bad58390c27c91299f31eec49298b0fe02e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55a73da7d30d36c6a6474dffce6967c9483b68008b42ade57c4e9dccb75533ff"} {"level":"debug","ts":"2026-07-06T20:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"761e2188ef2e10243dafd1b19aa00e8df918379f2c189f4dda173968d3016bf6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1296704c67634f660e8e2d8c0e41b4c684be88f0fb47a8abc2130efc8f64b65","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/849b8576d09fc6956c7abd26f214bad58390c27c91299f31eec49298b0fe02e4"} {"level":"debug","ts":"2026-07-06T20:07:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0c0348cbe003847fe743a0716992eeb78127ee5578791b376172400fa288701","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/761e2188ef2e10243dafd1b19aa00e8df918379f2c189f4dda173968d3016bf6"} {"level":"info","ts":"2026-07-06T20:07:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1296704c67634f660e8e2d8c0e41b4c684be88f0fb47a8abc2130efc8f64b65"} {"level":"debug","ts":"2026-07-06T20:07:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29d3e1309ad2453908b7e37610ecf2cf4d622d278acdc324aa47f5e7de5ca171","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0c0348cbe003847fe743a0716992eeb78127ee5578791b376172400fa288701"} {"level":"debug","ts":"2026-07-06T20:07:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8cbab4f7c685f5bfc3fdbd35cc3d4dfb2098ebe9e19dd237554f523d7bc9ff3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29d3e1309ad2453908b7e37610ecf2cf4d622d278acdc324aa47f5e7de5ca171"} {"level":"debug","ts":"2026-07-06T20:07:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2e0629df8bcd4689b23bc0344fa8d56b4364023d209a80c806cab8d31333583","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8cbab4f7c685f5bfc3fdbd35cc3d4dfb2098ebe9e19dd237554f523d7bc9ff3"} {"level":"debug","ts":"2026-07-06T20:07:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"def516e707d51fc2a156d3101540aba891ce54cc2f9bf5670779d03842449228","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2e0629df8bcd4689b23bc0344fa8d56b4364023d209a80c806cab8d31333583"} {"level":"debug","ts":"2026-07-06T20:07:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"290b320ce951b841f0d8387a9eb38f73e3d84b5007475d08d79798df2095f086","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5307dde013cc7ae69cf88219cb8b58cdd211ff4817d091db8171f4b68c9a5fe3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/def516e707d51fc2a156d3101540aba891ce54cc2f9bf5670779d03842449228"} {"level":"info","ts":"2026-07-06T20:07:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/290b320ce951b841f0d8387a9eb38f73e3d84b5007475d08d79798df2095f086"} {"level":"info","ts":"2026-07-06T20:07:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5307dde013cc7ae69cf88219cb8b58cdd211ff4817d091db8171f4b68c9a5fe3"} {"level":"info","ts":"2026-07-06T20:07:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ae67792-d28d-4d28-91f5-ac0f3f982c47","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58768","PortSpecifier":{"PortValue":58768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5ae67792-d28d-4d28-91f5-ac0f3f982c47","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:07:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ae67792-d28d-4d28-91f5-ac0f3f982c47","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58768","PortSpecifier":{"PortValue":58768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368430,"nanos":897932422},"http":{"id":"5ae67792-d28d-4d28-91f5-ac0f3f982c47","method":"POST","headers":{":authority":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:07:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5ae67792-d28d-4d28-91f5-ac0f3f982c47","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:07:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5ae67792-d28d-4d28-91f5-ac0f3f982c47","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e6077e34-2eac-4ffb-9aa1-503949628406","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"]}} {"level":"debug","ts":"2026-07-06T20:07:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5ae67792-d28d-4d28-91f5-ac0f3f982c47","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e6077e34-2eac-4ffb-9aa1-503949628406","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0130525c65d3d7e634a1666a16c850b7e5c37ef5470c76545b82aa0120261808"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:07:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ae67792-d28d-4d28-91f5-ac0f3f982c47","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:07:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ae67792-d28d-4d28-91f5-ac0f3f982c47","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:07:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ae67792-d28d-4d28-91f5-ac0f3f982c47","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4430fb/sub-test-model-4430fb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:07:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5ae67792-d28d-4d28-91f5-ac0f3f982c47","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:07:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ae67792-d28d-4d28-91f5-ac0f3f982c47","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T20:07:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ae67792-d28d-4d28-91f5-ac0f3f982c47","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T20:07:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ae67792-d28d-4d28-91f5-ac0f3f982c47","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:07:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ae67792-d28d-4d28-91f5-ac0f3f982c47","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:07:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5f53aec-5175-4c19-98e8-7308bde45f7b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54370","PortSpecifier":{"PortValue":54370}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d5f53aec-5175-4c19-98e8-7308bde45f7b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:07:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5f53aec-5175-4c19-98e8-7308bde45f7b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54370","PortSpecifier":{"PortValue":54370}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368430,"nanos":945671472},"http":{"id":"d5f53aec-5175-4c19-98e8-7308bde45f7b","method":"POST","headers":{":authority":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:07:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d5f53aec-5175-4c19-98e8-7308bde45f7b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:07:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d5f53aec-5175-4c19-98e8-7308bde45f7b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e6077e34-2eac-4ffb-9aa1-503949628406","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"]}} {"level":"debug","ts":"2026-07-06T20:07:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d5f53aec-5175-4c19-98e8-7308bde45f7b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e6077e34-2eac-4ffb-9aa1-503949628406","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:07:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5f53aec-5175-4c19-98e8-7308bde45f7b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:07:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5f53aec-5175-4c19-98e8-7308bde45f7b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:07:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5f53aec-5175-4c19-98e8-7308bde45f7b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-33ae61/sub-test-model-33ae61\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:07:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d5f53aec-5175-4c19-98e8-7308bde45f7b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:07:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5f53aec-5175-4c19-98e8-7308bde45f7b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:07:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5f53aec-5175-4c19-98e8-7308bde45f7b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T20:07:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5f53aec-5175-4c19-98e8-7308bde45f7b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:07:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5f53aec-5175-4c19-98e8-7308bde45f7b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:07:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb937a93-aa5d-9666-b010-d676da12e07c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58778","PortSpecifier":{"PortValue":58778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cb937a93-aa5d-9666-b010-d676da12e07c","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:07:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb937a93-aa5d-9666-b010-d676da12e07c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58778","PortSpecifier":{"PortValue":58778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368430,"nanos":997413128},"http":{"id":"cb937a93-aa5d-9666-b010-d676da12e07c","method":"GET","headers":{":authority":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:07:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cb937a93-aa5d-9666-b010-d676da12e07c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1QlaFqKlcQ4LnsSWF_LY8GhuuYzhdbhtlT5f8oD7JTlBqpCklQFMGU0w6cKjk"} {"level":"debug","ts":"2026-07-06T20:07:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cb937a93-aa5d-9666-b010-d676da12e07c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4430fb.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1QlaFqKlcQ4LnsSWF_LY8GhuuYzhdbhtlT5f8oD7JTlBqpCklQFMGU0w6cKjk\"}"} {"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cb937a93-aa5d-9666-b010-d676da12e07c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4430fb.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"00a37598-3b95-4a97-9e45-fee60381dcb9","keyName":"e2e-sub-iso-e5d91b","subscription":"e2e-a-only-0134aa","tenant":"e2e-shared-a-4430fb","userId":"00a37598-3b95-4a97-9e45-fee60381dcb9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cb937a93-aa5d-9666-b010-d676da12e07c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb937a93-aa5d-9666-b010-d676da12e07c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb937a93-aa5d-9666-b010-d676da12e07c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb937a93-aa5d-9666-b010-d676da12e07c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4430fb/sub-test-model-4430fb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb937a93-aa5d-9666-b010-d676da12e07c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb937a93-aa5d-9666-b010-d676da12e07c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cb937a93-aa5d-9666-b010-d676da12e07c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb937a93-aa5d-9666-b010-d676da12e07c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-0134aa"} {"level":"info","ts":"2026-07-06T20:07:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb937a93-aa5d-9666-b010-d676da12e07c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb937a93-aa5d-9666-b010-d676da12e07c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:07:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5524c4bd-f9ba-4039-9bea-429186629ec2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54380","PortSpecifier":{"PortValue":54380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5524c4bd-f9ba-4039-9bea-429186629ec2","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5524c4bd-f9ba-4039-9bea-429186629ec2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54380","PortSpecifier":{"PortValue":54380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368431,"nanos":41628807},"http":{"id":"5524c4bd-f9ba-4039-9bea-429186629ec2","method":"GET","headers":{":authority":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5524c4bd-f9ba-4039-9bea-429186629ec2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-186Cy0ZHPJFgRDqY8_I0zDr8a5myIsZqqpTBkeBkzFxe07bakef9M4wqyug6u"} {"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5524c4bd-f9ba-4039-9bea-429186629ec2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-33ae61.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-186Cy0ZHPJFgRDqY8_I0zDr8a5myIsZqqpTBkeBkzFxe07bakef9M4wqyug6u\"}"} {"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5524c4bd-f9ba-4039-9bea-429186629ec2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-33ae61.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c17fe721-a08f-4714-b60c-a287d6ea876e","keyName":"e2e-sub-iso-049b80","subscription":"e2e-b-only-0134aa","tenant":"e2e-shared-b-33ae61","userId":"c17fe721-a08f-4714-b60c-a287d6ea876e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5524c4bd-f9ba-4039-9bea-429186629ec2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5524c4bd-f9ba-4039-9bea-429186629ec2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5524c4bd-f9ba-4039-9bea-429186629ec2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5524c4bd-f9ba-4039-9bea-429186629ec2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-33ae61/sub-test-model-33ae61\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5524c4bd-f9ba-4039-9bea-429186629ec2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5524c4bd-f9ba-4039-9bea-429186629ec2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-0134aa"} {"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5524c4bd-f9ba-4039-9bea-429186629ec2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5524c4bd-f9ba-4039-9bea-429186629ec2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-06T20:07:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5524c4bd-f9ba-4039-9bea-429186629ec2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5524c4bd-f9ba-4039-9bea-429186629ec2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"041d9d37-0e53-4f2b-8825-6c9462c3c1d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36400","PortSpecifier":{"PortValue":36400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"041d9d37-0e53-4f2b-8825-6c9462c3c1d3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"041d9d37-0e53-4f2b-8825-6c9462c3c1d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36400","PortSpecifier":{"PortValue":36400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368442,"nanos":16437517},"http":{"id":"041d9d37-0e53-4f2b-8825-6c9462c3c1d3","method":"POST","headers":{":authority":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"041d9d37-0e53-4f2b-8825-6c9462c3c1d3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"041d9d37-0e53-4f2b-8825-6c9462c3c1d3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e6077e34-2eac-4ffb-9aa1-503949628406","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"]}} {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"041d9d37-0e53-4f2b-8825-6c9462c3c1d3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e6077e34-2eac-4ffb-9aa1-503949628406","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0130525c65d3d7e634a1666a16c850b7e5c37ef5470c76545b82aa0120261808"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"041d9d37-0e53-4f2b-8825-6c9462c3c1d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"041d9d37-0e53-4f2b-8825-6c9462c3c1d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"041d9d37-0e53-4f2b-8825-6c9462c3c1d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4430fb/sub-test-model-4430fb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"041d9d37-0e53-4f2b-8825-6c9462c3c1d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"041d9d37-0e53-4f2b-8825-6c9462c3c1d3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"041d9d37-0e53-4f2b-8825-6c9462c3c1d3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"041d9d37-0e53-4f2b-8825-6c9462c3c1d3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"041d9d37-0e53-4f2b-8825-6c9462c3c1d3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9ffc580-8a8c-4501-9318-5039854c19a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55646","PortSpecifier":{"PortValue":55646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b9ffc580-8a8c-4501-9318-5039854c19a4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9ffc580-8a8c-4501-9318-5039854c19a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55646","PortSpecifier":{"PortValue":55646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368442,"nanos":61316470},"http":{"id":"b9ffc580-8a8c-4501-9318-5039854c19a4","method":"POST","headers":{":authority":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b9ffc580-8a8c-4501-9318-5039854c19a4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b9ffc580-8a8c-4501-9318-5039854c19a4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e6077e34-2eac-4ffb-9aa1-503949628406","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"]}} {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b9ffc580-8a8c-4501-9318-5039854c19a4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e6077e34-2eac-4ffb-9aa1-503949628406","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9ffc580-8a8c-4501-9318-5039854c19a4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9ffc580-8a8c-4501-9318-5039854c19a4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9ffc580-8a8c-4501-9318-5039854c19a4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-33ae61/sub-test-model-33ae61\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b9ffc580-8a8c-4501-9318-5039854c19a4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9ffc580-8a8c-4501-9318-5039854c19a4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9ffc580-8a8c-4501-9318-5039854c19a4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9ffc580-8a8c-4501-9318-5039854c19a4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9ffc580-8a8c-4501-9318-5039854c19a4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2bd30c09-bfed-4f49-944d-bb1e615a3ad4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36404","PortSpecifier":{"PortValue":36404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2bd30c09-bfed-4f49-944d-bb1e615a3ad4","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2bd30c09-bfed-4f49-944d-bb1e615a3ad4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36404","PortSpecifier":{"PortValue":36404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368442,"nanos":108690721},"http":{"id":"2bd30c09-bfed-4f49-944d-bb1e615a3ad4","method":"POST","headers":{":authority":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2bd30c09-bfed-4f49-944d-bb1e615a3ad4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-PADrZxWrfVPcOk3Q_ulyhQq7ddTnAlcH3XcpxZL5CDB9yvFhIsPYyNuce1WH"} {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2bd30c09-bfed-4f49-944d-bb1e615a3ad4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4430fb.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-PADrZxWrfVPcOk3Q_ulyhQq7ddTnAlcH3XcpxZL5CDB9yvFhIsPYyNuce1WH\"}"} {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2bd30c09-bfed-4f49-944d-bb1e615a3ad4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4430fb.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3e32e2ed-16dc-47da-9588-0ea625f42d4d","keyName":"e2e-sub-iso-6e85d3","subscription":"e2e-shared-sub-037784","tenant":"e2e-shared-a-4430fb","userId":"3e32e2ed-16dc-47da-9588-0ea625f42d4d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2bd30c09-bfed-4f49-944d-bb1e615a3ad4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2bd30c09-bfed-4f49-944d-bb1e615a3ad4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2bd30c09-bfed-4f49-944d-bb1e615a3ad4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2bd30c09-bfed-4f49-944d-bb1e615a3ad4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4430fb/sub-test-model-4430fb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2bd30c09-bfed-4f49-944d-bb1e615a3ad4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2bd30c09-bfed-4f49-944d-bb1e615a3ad4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2bd30c09-bfed-4f49-944d-bb1e615a3ad4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2bd30c09-bfed-4f49-944d-bb1e615a3ad4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-037784"} {"level":"info","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2bd30c09-bfed-4f49-944d-bb1e615a3ad4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2bd30c09-bfed-4f49-944d-bb1e615a3ad4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0039a87-b736-440e-b7b1-c940268ed8dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55652","PortSpecifier":{"PortValue":55652}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c0039a87-b736-440e-b7b1-c940268ed8dd","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0039a87-b736-440e-b7b1-c940268ed8dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55652","PortSpecifier":{"PortValue":55652}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368442,"nanos":145185814},"http":{"id":"c0039a87-b736-440e-b7b1-c940268ed8dd","method":"POST","headers":{":authority":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c0039a87-b736-440e-b7b1-c940268ed8dd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YANYx1eRuWeFF2wi_oC5Fksq6lzg1FJdZ344PGmA9hmMX8ElMHc3hwUAN6D8"} {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c0039a87-b736-440e-b7b1-c940268ed8dd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-33ae61.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YANYx1eRuWeFF2wi_oC5Fksq6lzg1FJdZ344PGmA9hmMX8ElMHc3hwUAN6D8\"}"} {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c0039a87-b736-440e-b7b1-c940268ed8dd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-33ae61.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"89ae9713-4677-4220-a02a-ef765b5e1864","keyName":"e2e-sub-iso-064d3e","subscription":"e2e-shared-sub-037784","tenant":"e2e-shared-b-33ae61","userId":"89ae9713-4677-4220-a02a-ef765b5e1864","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c0039a87-b736-440e-b7b1-c940268ed8dd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0039a87-b736-440e-b7b1-c940268ed8dd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0039a87-b736-440e-b7b1-c940268ed8dd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0039a87-b736-440e-b7b1-c940268ed8dd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-33ae61/sub-test-model-33ae61\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0039a87-b736-440e-b7b1-c940268ed8dd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-037784"} {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0039a87-b736-440e-b7b1-c940268ed8dd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0039a87-b736-440e-b7b1-c940268ed8dd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c0039a87-b736-440e-b7b1-c940268ed8dd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0039a87-b736-440e-b7b1-c940268ed8dd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:07:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0039a87-b736-440e-b7b1-c940268ed8dd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:07:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0c0348cbe003847fe743a0716992eeb78127ee5578791b376172400fa288701"} {"level":"info","ts":"2026-07-06T20:07:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2abae5c914b5576bc83dc29ec7de5e0db864035f0b326074c70eeeb0460e9475"} {"level":"info","ts":"2026-07-06T20:07:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a2e0629df8bcd4689b23bc0344fa8d56b4364023d209a80c806cab8d31333583"} {"level":"info","ts":"2026-07-06T20:07:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/912c6413620c7beb5f3d4355ebe6e2852a335d67113bbb6167ad6bbd9aadf5bb"} {"level":"info","ts":"2026-07-06T20:07:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a2b5339d2ba89f10d7adccec81a4ce005fb061b1ec4b7ab1991b413391949d69"} {"level":"info","ts":"2026-07-06T20:07:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5307dde013cc7ae69cf88219cb8b58cdd211ff4817d091db8171f4b68c9a5fe3"} {"level":"info","ts":"2026-07-06T20:07:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d12f299d9d488ac6c991f070ff35a8636d45d9354a7c4dfc7e838692c5233a85"} {"level":"info","ts":"2026-07-06T20:07:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/def516e707d51fc2a156d3101540aba891ce54cc2f9bf5670779d03842449228"} {"level":"info","ts":"2026-07-06T20:07:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1296704c67634f660e8e2d8c0e41b4c684be88f0fb47a8abc2130efc8f64b65"} {"level":"info","ts":"2026-07-06T20:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/badd6bbe9a556241a785aca61d5f91a90e8035f33e6c3313f7ab550d0dac07e3"} {"level":"info","ts":"2026-07-06T20:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55a73da7d30d36c6a6474dffce6967c9483b68008b42ade57c4e9dccb75533ff"} {"level":"info","ts":"2026-07-06T20:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29d3e1309ad2453908b7e37610ecf2cf4d622d278acdc324aa47f5e7de5ca171"} {"level":"info","ts":"2026-07-06T20:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/849b8576d09fc6956c7abd26f214bad58390c27c91299f31eec49298b0fe02e4"} {"level":"info","ts":"2026-07-06T20:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/290b320ce951b841f0d8387a9eb38f73e3d84b5007475d08d79798df2095f086"} {"level":"info","ts":"2026-07-06T20:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/761e2188ef2e10243dafd1b19aa00e8df918379f2c189f4dda173968d3016bf6"} {"level":"info","ts":"2026-07-06T20:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/917c9cdbe6bf81df624e3d56400711c1a865428d6dc1f82e39eec2a2064eff6a"} {"level":"debug","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae"} {"level":"info","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae"} {"level":"error","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae"} {"level":"debug","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae"} {"level":"debug","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae"} {"level":"debug","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae"} {"level":"debug","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae"} {"level":"debug","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae"} {"level":"debug","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae"} {"level":"debug","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eab323116f1676f271512b8c53f8dba788d82c11063ebc1bd2493e5ac4d9bf3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae"} {"level":"info","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eab323116f1676f271512b8c53f8dba788d82c11063ebc1bd2493e5ac4d9bf3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eab323116f1676f271512b8c53f8dba788d82c11063ebc1bd2493e5ac4d9bf3f"} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eab323116f1676f271512b8c53f8dba788d82c11063ebc1bd2493e5ac4d9bf3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eab323116f1676f271512b8c53f8dba788d82c11063ebc1bd2493e5ac4d9bf3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae"} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eab323116f1676f271512b8c53f8dba788d82c11063ebc1bd2493e5ac4d9bf3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eab323116f1676f271512b8c53f8dba788d82c11063ebc1bd2493e5ac4d9bf3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eab323116f1676f271512b8c53f8dba788d82c11063ebc1bd2493e5ac4d9bf3f"} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eab323116f1676f271512b8c53f8dba788d82c11063ebc1bd2493e5ac4d9bf3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eab323116f1676f271512b8c53f8dba788d82c11063ebc1bd2493e5ac4d9bf3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eab323116f1676f271512b8c53f8dba788d82c11063ebc1bd2493e5ac4d9bf3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eab323116f1676f271512b8c53f8dba788d82c11063ebc1bd2493e5ac4d9bf3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eab323116f1676f271512b8c53f8dba788d82c11063ebc1bd2493e5ac4d9bf3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eab323116f1676f271512b8c53f8dba788d82c11063ebc1bd2493e5ac4d9bf3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae"} {"level":"error","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"eab323116f1676f271512b8c53f8dba788d82c11063ebc1bd2493e5ac4d9bf3f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"eab323116f1676f271512b8c53f8dba788d82c11063ebc1bd2493e5ac4d9bf3f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eab323116f1676f271512b8c53f8dba788d82c11063ebc1bd2493e5ac4d9bf3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eab323116f1676f271512b8c53f8dba788d82c11063ebc1bd2493e5ac4d9bf3f"} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eab323116f1676f271512b8c53f8dba788d82c11063ebc1bd2493e5ac4d9bf3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eab323116f1676f271512b8c53f8dba788d82c11063ebc1bd2493e5ac4d9bf3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eab323116f1676f271512b8c53f8dba788d82c11063ebc1bd2493e5ac4d9bf3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eab323116f1676f271512b8c53f8dba788d82c11063ebc1bd2493e5ac4d9bf3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eab323116f1676f271512b8c53f8dba788d82c11063ebc1bd2493e5ac4d9bf3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eab323116f1676f271512b8c53f8dba788d82c11063ebc1bd2493e5ac4d9bf3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eab323116f1676f271512b8c53f8dba788d82c11063ebc1bd2493e5ac4d9bf3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eab323116f1676f271512b8c53f8dba788d82c11063ebc1bd2493e5ac4d9bf3f"} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eab323116f1676f271512b8c53f8dba788d82c11063ebc1bd2493e5ac4d9bf3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eab323116f1676f271512b8c53f8dba788d82c11063ebc1bd2493e5ac4d9bf3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eab323116f1676f271512b8c53f8dba788d82c11063ebc1bd2493e5ac4d9bf3f"} {"level":"error","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"eab323116f1676f271512b8c53f8dba788d82c11063ebc1bd2493e5ac4d9bf3f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"eab323116f1676f271512b8c53f8dba788d82c11063ebc1bd2493e5ac4d9bf3f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eab323116f1676f271512b8c53f8dba788d82c11063ebc1bd2493e5ac4d9bf3f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eab323116f1676f271512b8c53f8dba788d82c11063ebc1bd2493e5ac4d9bf3f"} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eab323116f1676f271512b8c53f8dba788d82c11063ebc1bd2493e5ac4d9bf3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eab323116f1676f271512b8c53f8dba788d82c11063ebc1bd2493e5ac4d9bf3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eab323116f1676f271512b8c53f8dba788d82c11063ebc1bd2493e5ac4d9bf3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eab323116f1676f271512b8c53f8dba788d82c11063ebc1bd2493e5ac4d9bf3f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eab323116f1676f271512b8c53f8dba788d82c11063ebc1bd2493e5ac4d9bf3f"} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dd402389dc9a60245938c7634a94b81d3855a780acfc2a9af02cc0e61d4a57c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dd402389dc9a60245938c7634a94b81d3855a780acfc2a9af02cc0e61d4a57c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dd402389dc9a60245938c7634a94b81d3855a780acfc2a9af02cc0e61d4a57c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dd402389dc9a60245938c7634a94b81d3855a780acfc2a9af02cc0e61d4a57c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dd402389dc9a60245938c7634a94b81d3855a780acfc2a9af02cc0e61d4a57c"} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dd402389dc9a60245938c7634a94b81d3855a780acfc2a9af02cc0e61d4a57c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dd402389dc9a60245938c7634a94b81d3855a780acfc2a9af02cc0e61d4a57c"} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dd402389dc9a60245938c7634a94b81d3855a780acfc2a9af02cc0e61d4a57c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5dd402389dc9a60245938c7634a94b81d3855a780acfc2a9af02cc0e61d4a57c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dd402389dc9a60245938c7634a94b81d3855a780acfc2a9af02cc0e61d4a57c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f80490065df4f85503cff28bdbcc552be6ddc46a7bff38ae71273ac7e29f2154","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f80490065df4f85503cff28bdbcc552be6ddc46a7bff38ae71273ac7e29f2154","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dd402389dc9a60245938c7634a94b81d3855a780acfc2a9af02cc0e61d4a57c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f80490065df4f85503cff28bdbcc552be6ddc46a7bff38ae71273ac7e29f2154","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f80490065df4f85503cff28bdbcc552be6ddc46a7bff38ae71273ac7e29f2154"} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f80490065df4f85503cff28bdbcc552be6ddc46a7bff38ae71273ac7e29f2154","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f80490065df4f85503cff28bdbcc552be6ddc46a7bff38ae71273ac7e29f2154"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dd402389dc9a60245938c7634a94b81d3855a780acfc2a9af02cc0e61d4a57c"} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f80490065df4f85503cff28bdbcc552be6ddc46a7bff38ae71273ac7e29f2154","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f80490065df4f85503cff28bdbcc552be6ddc46a7bff38ae71273ac7e29f2154","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f80490065df4f85503cff28bdbcc552be6ddc46a7bff38ae71273ac7e29f2154"} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f80490065df4f85503cff28bdbcc552be6ddc46a7bff38ae71273ac7e29f2154","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f80490065df4f85503cff28bdbcc552be6ddc46a7bff38ae71273ac7e29f2154","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f80490065df4f85503cff28bdbcc552be6ddc46a7bff38ae71273ac7e29f2154","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f80490065df4f85503cff28bdbcc552be6ddc46a7bff38ae71273ac7e29f2154"} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f80490065df4f85503cff28bdbcc552be6ddc46a7bff38ae71273ac7e29f2154","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f80490065df4f85503cff28bdbcc552be6ddc46a7bff38ae71273ac7e29f2154"} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d"} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f80490065df4f85503cff28bdbcc552be6ddc46a7bff38ae71273ac7e29f2154","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f80490065df4f85503cff28bdbcc552be6ddc46a7bff38ae71273ac7e29f2154"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d"} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f80490065df4f85503cff28bdbcc552be6ddc46a7bff38ae71273ac7e29f2154","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f80490065df4f85503cff28bdbcc552be6ddc46a7bff38ae71273ac7e29f2154","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d"} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f80490065df4f85503cff28bdbcc552be6ddc46a7bff38ae71273ac7e29f2154"} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d"} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6df3f9d2e50ca1d1086bc7de2b1892000dff39eddc3909c9f2d7d3115f21b34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6df3f9d2e50ca1d1086bc7de2b1892000dff39eddc3909c9f2d7d3115f21b34"} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6df3f9d2e50ca1d1086bc7de2b1892000dff39eddc3909c9f2d7d3115f21b34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6df3f9d2e50ca1d1086bc7de2b1892000dff39eddc3909c9f2d7d3115f21b34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6df3f9d2e50ca1d1086bc7de2b1892000dff39eddc3909c9f2d7d3115f21b34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d"} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6df3f9d2e50ca1d1086bc7de2b1892000dff39eddc3909c9f2d7d3115f21b34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6df3f9d2e50ca1d1086bc7de2b1892000dff39eddc3909c9f2d7d3115f21b34"} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6df3f9d2e50ca1d1086bc7de2b1892000dff39eddc3909c9f2d7d3115f21b34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6df3f9d2e50ca1d1086bc7de2b1892000dff39eddc3909c9f2d7d3115f21b34"} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6df3f9d2e50ca1d1086bc7de2b1892000dff39eddc3909c9f2d7d3115f21b34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58d21d30e7a60db5d9782a7aade28e71de045899aec818171595757136c22c8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58d21d30e7a60db5d9782a7aade28e71de045899aec818171595757136c22c8a"} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58d21d30e7a60db5d9782a7aade28e71de045899aec818171595757136c22c8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d"} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6df3f9d2e50ca1d1086bc7de2b1892000dff39eddc3909c9f2d7d3115f21b34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58d21d30e7a60db5d9782a7aade28e71de045899aec818171595757136c22c8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58d21d30e7a60db5d9782a7aade28e71de045899aec818171595757136c22c8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6df3f9d2e50ca1d1086bc7de2b1892000dff39eddc3909c9f2d7d3115f21b34"} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58d21d30e7a60db5d9782a7aade28e71de045899aec818171595757136c22c8a"} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58d21d30e7a60db5d9782a7aade28e71de045899aec818171595757136c22c8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81c82e5fb7ca636533c19eba187c2824edf6837fa0dd92e5b83012dab3b86ce5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81c82e5fb7ca636533c19eba187c2824edf6837fa0dd92e5b83012dab3b86ce5"} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81c82e5fb7ca636533c19eba187c2824edf6837fa0dd92e5b83012dab3b86ce5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6df3f9d2e50ca1d1086bc7de2b1892000dff39eddc3909c9f2d7d3115f21b34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6df3f9d2e50ca1d1086bc7de2b1892000dff39eddc3909c9f2d7d3115f21b34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d"} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6df3f9d2e50ca1d1086bc7de2b1892000dff39eddc3909c9f2d7d3115f21b34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58d21d30e7a60db5d9782a7aade28e71de045899aec818171595757136c22c8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58d21d30e7a60db5d9782a7aade28e71de045899aec818171595757136c22c8a"} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58d21d30e7a60db5d9782a7aade28e71de045899aec818171595757136c22c8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81c82e5fb7ca636533c19eba187c2824edf6837fa0dd92e5b83012dab3b86ce5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81c82e5fb7ca636533c19eba187c2824edf6837fa0dd92e5b83012dab3b86ce5"} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6df3f9d2e50ca1d1086bc7de2b1892000dff39eddc3909c9f2d7d3115f21b34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6df3f9d2e50ca1d1086bc7de2b1892000dff39eddc3909c9f2d7d3115f21b34"} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6df3f9d2e50ca1d1086bc7de2b1892000dff39eddc3909c9f2d7d3115f21b34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58d21d30e7a60db5d9782a7aade28e71de045899aec818171595757136c22c8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81c82e5fb7ca636533c19eba187c2824edf6837fa0dd92e5b83012dab3b86ce5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81c82e5fb7ca636533c19eba187c2824edf6837fa0dd92e5b83012dab3b86ce5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58d21d30e7a60db5d9782a7aade28e71de045899aec818171595757136c22c8a"} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81c82e5fb7ca636533c19eba187c2824edf6837fa0dd92e5b83012dab3b86ce5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6df3f9d2e50ca1d1086bc7de2b1892000dff39eddc3909c9f2d7d3115f21b34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6df3f9d2e50ca1d1086bc7de2b1892000dff39eddc3909c9f2d7d3115f21b34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d"} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6df3f9d2e50ca1d1086bc7de2b1892000dff39eddc3909c9f2d7d3115f21b34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58d21d30e7a60db5d9782a7aade28e71de045899aec818171595757136c22c8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58d21d30e7a60db5d9782a7aade28e71de045899aec818171595757136c22c8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6df3f9d2e50ca1d1086bc7de2b1892000dff39eddc3909c9f2d7d3115f21b34"} {"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58d21d30e7a60db5d9782a7aade28e71de045899aec818171595757136c22c8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81c82e5fb7ca636533c19eba187c2824edf6837fa0dd92e5b83012dab3b86ce5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81c82e5fb7ca636533c19eba187c2824edf6837fa0dd92e5b83012dab3b86ce5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81c82e5fb7ca636533c19eba187c2824edf6837fa0dd92e5b83012dab3b86ce5"} {"level":"debug","ts":"2026-07-06T20:07:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6df3f9d2e50ca1d1086bc7de2b1892000dff39eddc3909c9f2d7d3115f21b34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58d21d30e7a60db5d9782a7aade28e71de045899aec818171595757136c22c8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81c82e5fb7ca636533c19eba187c2824edf6837fa0dd92e5b83012dab3b86ce5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81c82e5fb7ca636533c19eba187c2824edf6837fa0dd92e5b83012dab3b86ce5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d"} {"level":"info","ts":"2026-07-06T20:07:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81c82e5fb7ca636533c19eba187c2824edf6837fa0dd92e5b83012dab3b86ce5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81c82e5fb7ca636533c19eba187c2824edf6837fa0dd92e5b83012dab3b86ce5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6df3f9d2e50ca1d1086bc7de2b1892000dff39eddc3909c9f2d7d3115f21b34"} {"level":"info","ts":"2026-07-06T20:07:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58d21d30e7a60db5d9782a7aade28e71de045899aec818171595757136c22c8a"} {"level":"info","ts":"2026-07-06T20:07:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81c82e5fb7ca636533c19eba187c2824edf6837fa0dd92e5b83012dab3b86ce5"} {"level":"info","ts":"2026-07-06T20:07:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d"} {"level":"debug","ts":"2026-07-06T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd"} {"level":"debug","ts":"2026-07-06T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd"} {"level":"debug","ts":"2026-07-06T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd"} {"level":"debug","ts":"2026-07-06T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd"} {"level":"debug","ts":"2026-07-06T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd"} {"level":"debug","ts":"2026-07-06T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd"} {"level":"debug","ts":"2026-07-06T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd"} {"level":"debug","ts":"2026-07-06T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd"} {"level":"debug","ts":"2026-07-06T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b088ed01780cd14cc05cbf04a3876e125a34e29b41ce78ed68e50facb198017","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b088ed01780cd14cc05cbf04a3876e125a34e29b41ce78ed68e50facb198017","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b088ed01780cd14cc05cbf04a3876e125a34e29b41ce78ed68e50facb198017","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b088ed01780cd14cc05cbf04a3876e125a34e29b41ce78ed68e50facb198017"} {"level":"debug","ts":"2026-07-06T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b088ed01780cd14cc05cbf04a3876e125a34e29b41ce78ed68e50facb198017","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b088ed01780cd14cc05cbf04a3876e125a34e29b41ce78ed68e50facb198017"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b088ed01780cd14cc05cbf04a3876e125a34e29b41ce78ed68e50facb198017","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b088ed01780cd14cc05cbf04a3876e125a34e29b41ce78ed68e50facb198017","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd"} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b088ed01780cd14cc05cbf04a3876e125a34e29b41ce78ed68e50facb198017"} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e18c089a6db3455a9362c67ba248596d88378de8f78819b4ab7bbd070ab84c55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e18c089a6db3455a9362c67ba248596d88378de8f78819b4ab7bbd070ab84c55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e18c089a6db3455a9362c67ba248596d88378de8f78819b4ab7bbd070ab84c55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e18c089a6db3455a9362c67ba248596d88378de8f78819b4ab7bbd070ab84c55","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e18c089a6db3455a9362c67ba248596d88378de8f78819b4ab7bbd070ab84c55"} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e18c089a6db3455a9362c67ba248596d88378de8f78819b4ab7bbd070ab84c55","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e18c089a6db3455a9362c67ba248596d88378de8f78819b4ab7bbd070ab84c55"} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e18c089a6db3455a9362c67ba248596d88378de8f78819b4ab7bbd070ab84c55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e18c089a6db3455a9362c67ba248596d88378de8f78819b4ab7bbd070ab84c55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e18c089a6db3455a9362c67ba248596d88378de8f78819b4ab7bbd070ab84c55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e18c089a6db3455a9362c67ba248596d88378de8f78819b4ab7bbd070ab84c55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e18c089a6db3455a9362c67ba248596d88378de8f78819b4ab7bbd070ab84c55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e18c089a6db3455a9362c67ba248596d88378de8f78819b4ab7bbd070ab84c55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e18c089a6db3455a9362c67ba248596d88378de8f78819b4ab7bbd070ab84c55","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e18c089a6db3455a9362c67ba248596d88378de8f78819b4ab7bbd070ab84c55"} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e18c089a6db3455a9362c67ba248596d88378de8f78819b4ab7bbd070ab84c55","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e18c089a6db3455a9362c67ba248596d88378de8f78819b4ab7bbd070ab84c55"} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e18c089a6db3455a9362c67ba248596d88378de8f78819b4ab7bbd070ab84c55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e18c089a6db3455a9362c67ba248596d88378de8f78819b4ab7bbd070ab84c55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e18c089a6db3455a9362c67ba248596d88378de8f78819b4ab7bbd070ab84c55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e18c089a6db3455a9362c67ba248596d88378de8f78819b4ab7bbd070ab84c55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e18c089a6db3455a9362c67ba248596d88378de8f78819b4ab7bbd070ab84c55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e18c089a6db3455a9362c67ba248596d88378de8f78819b4ab7bbd070ab84c55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e18c089a6db3455a9362c67ba248596d88378de8f78819b4ab7bbd070ab84c55","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e18c089a6db3455a9362c67ba248596d88378de8f78819b4ab7bbd070ab84c55"} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e18c089a6db3455a9362c67ba248596d88378de8f78819b4ab7bbd070ab84c55","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e18c089a6db3455a9362c67ba248596d88378de8f78819b4ab7bbd070ab84c55"} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e18c089a6db3455a9362c67ba248596d88378de8f78819b4ab7bbd070ab84c55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e18c089a6db3455a9362c67ba248596d88378de8f78819b4ab7bbd070ab84c55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e18c089a6db3455a9362c67ba248596d88378de8f78819b4ab7bbd070ab84c55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e18c089a6db3455a9362c67ba248596d88378de8f78819b4ab7bbd070ab84c55","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e18c089a6db3455a9362c67ba248596d88378de8f78819b4ab7bbd070ab84c55"} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330"} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330"} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d478685329fb83f41be584563217befc9713bfeb51897dfe4906872ac5b3b48c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d478685329fb83f41be584563217befc9713bfeb51897dfe4906872ac5b3b48c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8553ec1ca2a7a71b859e990fb20dbaeffa577f17d8efbf4821762df9554cafde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d478685329fb83f41be584563217befc9713bfeb51897dfe4906872ac5b3b48c"} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8553ec1ca2a7a71b859e990fb20dbaeffa577f17d8efbf4821762df9554cafde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d478685329fb83f41be584563217befc9713bfeb51897dfe4906872ac5b3b48c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d478685329fb83f41be584563217befc9713bfeb51897dfe4906872ac5b3b48c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330"} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d478685329fb83f41be584563217befc9713bfeb51897dfe4906872ac5b3b48c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8553ec1ca2a7a71b859e990fb20dbaeffa577f17d8efbf4821762df9554cafde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8553ec1ca2a7a71b859e990fb20dbaeffa577f17d8efbf4821762df9554cafde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d478685329fb83f41be584563217befc9713bfeb51897dfe4906872ac5b3b48c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8553ec1ca2a7a71b859e990fb20dbaeffa577f17d8efbf4821762df9554cafde","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8553ec1ca2a7a71b859e990fb20dbaeffa577f17d8efbf4821762df9554cafde"} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8553ec1ca2a7a71b859e990fb20dbaeffa577f17d8efbf4821762df9554cafde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8553ec1ca2a7a71b859e990fb20dbaeffa577f17d8efbf4821762df9554cafde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d478685329fb83f41be584563217befc9713bfeb51897dfe4906872ac5b3b48c"} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8553ec1ca2a7a71b859e990fb20dbaeffa577f17d8efbf4821762df9554cafde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8553ec1ca2a7a71b859e990fb20dbaeffa577f17d8efbf4821762df9554cafde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8553ec1ca2a7a71b859e990fb20dbaeffa577f17d8efbf4821762df9554cafde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1710cf4b37f4bfdbca22fb067c9e085b161376871a4635911d26597a2abfd44e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8553ec1ca2a7a71b859e990fb20dbaeffa577f17d8efbf4821762df9554cafde"} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1710cf4b37f4bfdbca22fb067c9e085b161376871a4635911d26597a2abfd44e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8553ec1ca2a7a71b859e990fb20dbaeffa577f17d8efbf4821762df9554cafde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8553ec1ca2a7a71b859e990fb20dbaeffa577f17d8efbf4821762df9554cafde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1710cf4b37f4bfdbca22fb067c9e085b161376871a4635911d26597a2abfd44e"} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8553ec1ca2a7a71b859e990fb20dbaeffa577f17d8efbf4821762df9554cafde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1710cf4b37f4bfdbca22fb067c9e085b161376871a4635911d26597a2abfd44e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1710cf4b37f4bfdbca22fb067c9e085b161376871a4635911d26597a2abfd44e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1710cf4b37f4bfdbca22fb067c9e085b161376871a4635911d26597a2abfd44e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8553ec1ca2a7a71b859e990fb20dbaeffa577f17d8efbf4821762df9554cafde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8553ec1ca2a7a71b859e990fb20dbaeffa577f17d8efbf4821762df9554cafde"} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8553ec1ca2a7a71b859e990fb20dbaeffa577f17d8efbf4821762df9554cafde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1710cf4b37f4bfdbca22fb067c9e085b161376871a4635911d26597a2abfd44e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1710cf4b37f4bfdbca22fb067c9e085b161376871a4635911d26597a2abfd44e"} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1710cf4b37f4bfdbca22fb067c9e085b161376871a4635911d26597a2abfd44e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8553ec1ca2a7a71b859e990fb20dbaeffa577f17d8efbf4821762df9554cafde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1710cf4b37f4bfdbca22fb067c9e085b161376871a4635911d26597a2abfd44e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1710cf4b37f4bfdbca22fb067c9e085b161376871a4635911d26597a2abfd44e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8553ec1ca2a7a71b859e990fb20dbaeffa577f17d8efbf4821762df9554cafde"} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1710cf4b37f4bfdbca22fb067c9e085b161376871a4635911d26597a2abfd44e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8553ec1ca2a7a71b859e990fb20dbaeffa577f17d8efbf4821762df9554cafde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8553ec1ca2a7a71b859e990fb20dbaeffa577f17d8efbf4821762df9554cafde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1710cf4b37f4bfdbca22fb067c9e085b161376871a4635911d26597a2abfd44e"} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8553ec1ca2a7a71b859e990fb20dbaeffa577f17d8efbf4821762df9554cafde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1710cf4b37f4bfdbca22fb067c9e085b161376871a4635911d26597a2abfd44e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1710cf4b37f4bfdbca22fb067c9e085b161376871a4635911d26597a2abfd44e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8553ec1ca2a7a71b859e990fb20dbaeffa577f17d8efbf4821762df9554cafde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1710cf4b37f4bfdbca22fb067c9e085b161376871a4635911d26597a2abfd44e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1710cf4b37f4bfdbca22fb067c9e085b161376871a4635911d26597a2abfd44e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1710cf4b37f4bfdbca22fb067c9e085b161376871a4635911d26597a2abfd44e"} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1710cf4b37f4bfdbca22fb067c9e085b161376871a4635911d26597a2abfd44e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1710cf4b37f4bfdbca22fb067c9e085b161376871a4635911d26597a2abfd44e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8553ec1ca2a7a71b859e990fb20dbaeffa577f17d8efbf4821762df9554cafde"} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1710cf4b37f4bfdbca22fb067c9e085b161376871a4635911d26597a2abfd44e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1710cf4b37f4bfdbca22fb067c9e085b161376871a4635911d26597a2abfd44e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1710cf4b37f4bfdbca22fb067c9e085b161376871a4635911d26597a2abfd44e"} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1710cf4b37f4bfdbca22fb067c9e085b161376871a4635911d26597a2abfd44e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1710cf4b37f4bfdbca22fb067c9e085b161376871a4635911d26597a2abfd44e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1710cf4b37f4bfdbca22fb067c9e085b161376871a4635911d26597a2abfd44e"} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1710cf4b37f4bfdbca22fb067c9e085b161376871a4635911d26597a2abfd44e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1710cf4b37f4bfdbca22fb067c9e085b161376871a4635911d26597a2abfd44e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87"} {"level":"info","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1710cf4b37f4bfdbca22fb067c9e085b161376871a4635911d26597a2abfd44e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1710cf4b37f4bfdbca22fb067c9e085b161376871a4635911d26597a2abfd44e"} {"level":"info","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1710cf4b37f4bfdbca22fb067c9e085b161376871a4635911d26597a2abfd44e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87"} {"level":"error","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1710cf4b37f4bfdbca22fb067c9e085b161376871a4635911d26597a2abfd44e"} {"level":"error","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87"} {"level":"info","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87"} {"level":"debug","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87"} {"level":"debug","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87"} {"level":"debug","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87"} {"level":"debug","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87"} {"level":"debug","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87"} {"level":"debug","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87"} {"level":"debug","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87"} {"level":"debug","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87"} {"level":"debug","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87"} {"level":"debug","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87"} {"level":"debug","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87"} {"level":"debug","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87"} {"level":"debug","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87"} {"level":"debug","ts":"2026-07-06T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dd402389dc9a60245938c7634a94b81d3855a780acfc2a9af02cc0e61d4a57c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dd402389dc9a60245938c7634a94b81d3855a780acfc2a9af02cc0e61d4a57c"} {"level":"debug","ts":"2026-07-06T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58d21d30e7a60db5d9782a7aade28e71de045899aec818171595757136c22c8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:08:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:08:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58d21d30e7a60db5d9782a7aade28e71de045899aec818171595757136c22c8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58d21d30e7a60db5d9782a7aade28e71de045899aec818171595757136c22c8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58d21d30e7a60db5d9782a7aade28e71de045899aec818171595757136c22c8a"} {"level":"debug","ts":"2026-07-06T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58d21d30e7a60db5d9782a7aade28e71de045899aec818171595757136c22c8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58d21d30e7a60db5d9782a7aade28e71de045899aec818171595757136c22c8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58d21d30e7a60db5d9782a7aade28e71de045899aec818171595757136c22c8a"} {"level":"debug","ts":"2026-07-06T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8553ec1ca2a7a71b859e990fb20dbaeffa577f17d8efbf4821762df9554cafde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:08:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:08:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8553ec1ca2a7a71b859e990fb20dbaeffa577f17d8efbf4821762df9554cafde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8553ec1ca2a7a71b859e990fb20dbaeffa577f17d8efbf4821762df9554cafde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58d21d30e7a60db5d9782a7aade28e71de045899aec818171595757136c22c8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:08:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:08:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58d21d30e7a60db5d9782a7aade28e71de045899aec818171595757136c22c8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58d21d30e7a60db5d9782a7aade28e71de045899aec818171595757136c22c8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8553ec1ca2a7a71b859e990fb20dbaeffa577f17d8efbf4821762df9554cafde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58d21d30e7a60db5d9782a7aade28e71de045899aec818171595757136c22c8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8553ec1ca2a7a71b859e990fb20dbaeffa577f17d8efbf4821762df9554cafde"} {"level":"debug","ts":"2026-07-06T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8553ec1ca2a7a71b859e990fb20dbaeffa577f17d8efbf4821762df9554cafde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:08:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:08:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8553ec1ca2a7a71b859e990fb20dbaeffa577f17d8efbf4821762df9554cafde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8553ec1ca2a7a71b859e990fb20dbaeffa577f17d8efbf4821762df9554cafde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8553ec1ca2a7a71b859e990fb20dbaeffa577f17d8efbf4821762df9554cafde","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58d21d30e7a60db5d9782a7aade28e71de045899aec818171595757136c22c8a"} {"level":"info","ts":"2026-07-06T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8553ec1ca2a7a71b859e990fb20dbaeffa577f17d8efbf4821762df9554cafde"} {"level":"debug","ts":"2026-07-06T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d478685329fb83f41be584563217befc9713bfeb51897dfe4906872ac5b3b48c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:08:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:08:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d478685329fb83f41be584563217befc9713bfeb51897dfe4906872ac5b3b48c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d478685329fb83f41be584563217befc9713bfeb51897dfe4906872ac5b3b48c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d478685329fb83f41be584563217befc9713bfeb51897dfe4906872ac5b3b48c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d478685329fb83f41be584563217befc9713bfeb51897dfe4906872ac5b3b48c"} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d478685329fb83f41be584563217befc9713bfeb51897dfe4906872ac5b3b48c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d478685329fb83f41be584563217befc9713bfeb51897dfe4906872ac5b3b48c"} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d478685329fb83f41be584563217befc9713bfeb51897dfe4906872ac5b3b48c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:08:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:08:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d478685329fb83f41be584563217befc9713bfeb51897dfe4906872ac5b3b48c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d478685329fb83f41be584563217befc9713bfeb51897dfe4906872ac5b3b48c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:08:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:08:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d478685329fb83f41be584563217befc9713bfeb51897dfe4906872ac5b3b48c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330"} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:08:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:08:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d478685329fb83f41be584563217befc9713bfeb51897dfe4906872ac5b3b48c"} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:08:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:08:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330"} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330"} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330"} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:08:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:08:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:08:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:08:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22"} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:08:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:08:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330"} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:08:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:08:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22"} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:08:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:08:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:08:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:08:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330"} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca0dae68b105c77c6f296c772c69173ff9d09be44eafb8e0d69212bb214b7c3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:08:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:08:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca0dae68b105c77c6f296c772c69173ff9d09be44eafb8e0d69212bb214b7c3e"} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca0dae68b105c77c6f296c772c69173ff9d09be44eafb8e0d69212bb214b7c3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:08:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:08:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22"} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca0dae68b105c77c6f296c772c69173ff9d09be44eafb8e0d69212bb214b7c3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:08:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:08:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca0dae68b105c77c6f296c772c69173ff9d09be44eafb8e0d69212bb214b7c3e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca0dae68b105c77c6f296c772c69173ff9d09be44eafb8e0d69212bb214b7c3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:08:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:08:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330"} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:08:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:08:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca0dae68b105c77c6f296c772c69173ff9d09be44eafb8e0d69212bb214b7c3e"} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca0dae68b105c77c6f296c772c69173ff9d09be44eafb8e0d69212bb214b7c3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:08:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:08:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0130525c65d3d7e634a1666a16c850b7e5c37ef5470c76545b82aa0120261808","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22"} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:08:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:08:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd"} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330"} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0130525c65d3d7e634a1666a16c850b7e5c37ef5470c76545b82aa0120261808"} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6df3f9d2e50ca1d1086bc7de2b1892000dff39eddc3909c9f2d7d3115f21b34","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22"} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6df3f9d2e50ca1d1086bc7de2b1892000dff39eddc3909c9f2d7d3115f21b34"} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae"} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:08:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:08:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81c82e5fb7ca636533c19eba187c2824edf6837fa0dd92e5b83012dab3b86ce5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d"} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eab323116f1676f271512b8c53f8dba788d82c11063ebc1bd2493e5ac4d9bf3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:08:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:08:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81c82e5fb7ca636533c19eba187c2824edf6837fa0dd92e5b83012dab3b86ce5"} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e18c089a6db3455a9362c67ba248596d88378de8f78819b4ab7bbd070ab84c55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:08:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:08:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d"} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:08:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:08:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eab323116f1676f271512b8c53f8dba788d82c11063ebc1bd2493e5ac4d9bf3f"} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:08:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:08:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e18c089a6db3455a9362c67ba248596d88378de8f78819b4ab7bbd070ab84c55"} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f80490065df4f85503cff28bdbcc552be6ddc46a7bff38ae71273ac7e29f2154","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d"} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b088ed01780cd14cc05cbf04a3876e125a34e29b41ce78ed68e50facb198017","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1710cf4b37f4bfdbca22fb067c9e085b161376871a4635911d26597a2abfd44e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87"} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f80490065df4f85503cff28bdbcc552be6ddc46a7bff38ae71273ac7e29f2154"} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b088ed01780cd14cc05cbf04a3876e125a34e29b41ce78ed68e50facb198017"} {"level":"debug","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8cbab4f7c685f5bfc3fdbd35cc3d4dfb2098ebe9e19dd237554f523d7bc9ff3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1710cf4b37f4bfdbca22fb067c9e085b161376871a4635911d26597a2abfd44e"} {"level":"info","ts":"2026-07-06T20:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8cbab4f7c685f5bfc3fdbd35cc3d4dfb2098ebe9e19dd237554f523d7bc9ff3"} {"level":"info","ts":"2026-07-06T20:08:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06477511-e903-4741-96ad-8bcf7ed615bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39690","PortSpecifier":{"PortValue":39690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"06477511-e903-4741-96ad-8bcf7ed615bb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:08:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06477511-e903-4741-96ad-8bcf7ed615bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39690","PortSpecifier":{"PortValue":39690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368493,"nanos":653610651},"http":{"id":"06477511-e903-4741-96ad-8bcf7ed615bb","method":"POST","headers":{":authority":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:08:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"06477511-e903-4741-96ad-8bcf7ed615bb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:08:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"06477511-e903-4741-96ad-8bcf7ed615bb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e6077e34-2eac-4ffb-9aa1-503949628406","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"]}} {"level":"debug","ts":"2026-07-06T20:08:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"06477511-e903-4741-96ad-8bcf7ed615bb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e6077e34-2eac-4ffb-9aa1-503949628406","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0130525c65d3d7e634a1666a16c850b7e5c37ef5470c76545b82aa0120261808"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:08:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06477511-e903-4741-96ad-8bcf7ed615bb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:08:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06477511-e903-4741-96ad-8bcf7ed615bb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:08:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06477511-e903-4741-96ad-8bcf7ed615bb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4430fb/rate-test-model-4430fb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:08:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"06477511-e903-4741-96ad-8bcf7ed615bb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:08:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06477511-e903-4741-96ad-8bcf7ed615bb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:08:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06477511-e903-4741-96ad-8bcf7ed615bb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T20:08:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06477511-e903-4741-96ad-8bcf7ed615bb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:08:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06477511-e903-4741-96ad-8bcf7ed615bb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:08:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc0885b3-4d74-42aa-aed0-67f98e3c1470","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:48058","PortSpecifier":{"PortValue":48058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cc0885b3-4d74-42aa-aed0-67f98e3c1470","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:08:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc0885b3-4d74-42aa-aed0-67f98e3c1470","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:48058","PortSpecifier":{"PortValue":48058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368493,"nanos":700221286},"http":{"id":"cc0885b3-4d74-42aa-aed0-67f98e3c1470","method":"POST","headers":{":authority":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:08:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cc0885b3-4d74-42aa-aed0-67f98e3c1470","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:08:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cc0885b3-4d74-42aa-aed0-67f98e3c1470","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e6077e34-2eac-4ffb-9aa1-503949628406","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"]}} {"level":"debug","ts":"2026-07-06T20:08:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cc0885b3-4d74-42aa-aed0-67f98e3c1470","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e6077e34-2eac-4ffb-9aa1-503949628406","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:08:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc0885b3-4d74-42aa-aed0-67f98e3c1470","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:08:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc0885b3-4d74-42aa-aed0-67f98e3c1470","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:08:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc0885b3-4d74-42aa-aed0-67f98e3c1470","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-33ae61/rate-test-model-33ae61\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:08:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cc0885b3-4d74-42aa-aed0-67f98e3c1470","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:08:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc0885b3-4d74-42aa-aed0-67f98e3c1470","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:08:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc0885b3-4d74-42aa-aed0-67f98e3c1470","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T20:08:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc0885b3-4d74-42aa-aed0-67f98e3c1470","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:08:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc0885b3-4d74-42aa-aed0-67f98e3c1470","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:08:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e812fa9-4182-4ea6-be82-e0d40a324985","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39694","PortSpecifier":{"PortValue":39694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9e812fa9-4182-4ea6-be82-e0d40a324985","method":"POST","path":"/ai-tenant-e2e-shared-a-4430fb/rate-test-model-4430fb/v1/completions","host":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:08:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e812fa9-4182-4ea6-be82-e0d40a324985","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39694","PortSpecifier":{"PortValue":39694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368493,"nanos":746138763},"http":{"id":"9e812fa9-4182-4ea6-be82-e0d40a324985","method":"POST","headers":{":authority":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4430fb/rate-test-model-4430fb/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:08:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9e812fa9-4182-4ea6-be82-e0d40a324985","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-jz7BfXarnoDg1N2T_UTXFTfP0l2zfdZFj3xJuIrxFApSW8od94oZ8j49UIsL"} {"level":"debug","ts":"2026-07-06T20:08:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9e812fa9-4182-4ea6-be82-e0d40a324985","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4430fb.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-jz7BfXarnoDg1N2T_UTXFTfP0l2zfdZFj3xJuIrxFApSW8od94oZ8j49UIsL\"}"} {"level":"debug","ts":"2026-07-06T20:08:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9e812fa9-4182-4ea6-be82-e0d40a324985","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4430fb.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f8aac043-3dad-43fe-b389-30aea08ebd6d","keyName":"e2e-rate-a-75f64c","subscription":"e2e-rate-iso-a-75f64c","tenant":"e2e-shared-a-4430fb","userId":"f8aac043-3dad-43fe-b389-30aea08ebd6d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T20:08:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9e812fa9-4182-4ea6-be82-e0d40a324985","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4430fb.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4430fb/rate-test-model-4430fb\",\"requestedSubscription\":\"e2e-rate-iso-a-75f64c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T20:08:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9e812fa9-4182-4ea6-be82-e0d40a324985","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4430fb.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4430fb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-75f64c","namespace":"ai-tenant-e2e-shared-a-4430fb","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T20:08:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9e812fa9-4182-4ea6-be82-e0d40a324985","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:08:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e812fa9-4182-4ea6-be82-e0d40a324985","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:08:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e812fa9-4182-4ea6-be82-e0d40a324985","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:08:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e812fa9-4182-4ea6-be82-e0d40a324985","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4430fb/rate-test-model-4430fb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:08:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e812fa9-4182-4ea6-be82-e0d40a324985","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:08:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e812fa9-4182-4ea6-be82-e0d40a324985","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:08:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e812fa9-4182-4ea6-be82-e0d40a324985","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T20:08:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e812fa9-4182-4ea6-be82-e0d40a324985","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-75f64c"} {"level":"debug","ts":"2026-07-06T20:08:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e812fa9-4182-4ea6-be82-e0d40a324985","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f8aac043-3dad-43fe-b389-30aea08ebd6d","keyName":"e2e-rate-a-75f64c","selected_subscription":"e2e-rate-iso-a-75f64c","selected_subscription_key":"ai-tenant-e2e-shared-a-4430fb/e2e-rate-iso-a-75f64c@ai-tenant-e2e-shared-a-4430fb/rate-test-model-4430fb","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4430fb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-75f64c","namespace":"ai-tenant-e2e-shared-a-4430fb","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T20:08:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e812fa9-4182-4ea6-be82-e0d40a324985","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:08:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e812fa9-4182-4ea6-be82-e0d40a324985","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:08:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1deba4b8-81d0-4bc9-8b8a-17346c64f6bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44900","PortSpecifier":{"PortValue":44900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1deba4b8-81d0-4bc9-8b8a-17346c64f6bb","method":"POST","path":"/ai-tenant-e2e-shared-a-4430fb/rate-test-model-4430fb/v1/completions","host":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:08:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1deba4b8-81d0-4bc9-8b8a-17346c64f6bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44900","PortSpecifier":{"PortValue":44900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368494,"nanos":803276720},"http":{"id":"1deba4b8-81d0-4bc9-8b8a-17346c64f6bb","method":"POST","headers":{":authority":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4430fb/rate-test-model-4430fb/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:08:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1deba4b8-81d0-4bc9-8b8a-17346c64f6bb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-jz7BfXarnoDg1N2T_UTXFTfP0l2zfdZFj3xJuIrxFApSW8od94oZ8j49UIsL"} {"level":"debug","ts":"2026-07-06T20:08:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1deba4b8-81d0-4bc9-8b8a-17346c64f6bb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4430fb.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-jz7BfXarnoDg1N2T_UTXFTfP0l2zfdZFj3xJuIrxFApSW8od94oZ8j49UIsL\"}"} {"level":"debug","ts":"2026-07-06T20:08:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1deba4b8-81d0-4bc9-8b8a-17346c64f6bb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4430fb.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f8aac043-3dad-43fe-b389-30aea08ebd6d","keyName":"e2e-rate-a-75f64c","subscription":"e2e-rate-iso-a-75f64c","tenant":"e2e-shared-a-4430fb","userId":"f8aac043-3dad-43fe-b389-30aea08ebd6d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T20:08:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1deba4b8-81d0-4bc9-8b8a-17346c64f6bb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4430fb.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4430fb/rate-test-model-4430fb\",\"requestedSubscription\":\"e2e-rate-iso-a-75f64c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T20:08:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1deba4b8-81d0-4bc9-8b8a-17346c64f6bb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4430fb.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4430fb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-75f64c","namespace":"ai-tenant-e2e-shared-a-4430fb","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T20:08:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1deba4b8-81d0-4bc9-8b8a-17346c64f6bb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:08:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1deba4b8-81d0-4bc9-8b8a-17346c64f6bb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:08:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1deba4b8-81d0-4bc9-8b8a-17346c64f6bb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:08:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1deba4b8-81d0-4bc9-8b8a-17346c64f6bb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4430fb/rate-test-model-4430fb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:08:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1deba4b8-81d0-4bc9-8b8a-17346c64f6bb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:08:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1deba4b8-81d0-4bc9-8b8a-17346c64f6bb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:08:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1deba4b8-81d0-4bc9-8b8a-17346c64f6bb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-75f64c"} {"level":"debug","ts":"2026-07-06T20:08:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1deba4b8-81d0-4bc9-8b8a-17346c64f6bb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T20:08:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1deba4b8-81d0-4bc9-8b8a-17346c64f6bb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f8aac043-3dad-43fe-b389-30aea08ebd6d","keyName":"e2e-rate-a-75f64c","selected_subscription":"e2e-rate-iso-a-75f64c","selected_subscription_key":"ai-tenant-e2e-shared-a-4430fb/e2e-rate-iso-a-75f64c@ai-tenant-e2e-shared-a-4430fb/rate-test-model-4430fb","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4430fb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-75f64c","namespace":"ai-tenant-e2e-shared-a-4430fb","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T20:08:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1deba4b8-81d0-4bc9-8b8a-17346c64f6bb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:08:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1deba4b8-81d0-4bc9-8b8a-17346c64f6bb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:08:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0dc0fed-7da5-4463-9e7c-c6ad2c1a831e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44916","PortSpecifier":{"PortValue":44916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a0dc0fed-7da5-4463-9e7c-c6ad2c1a831e","method":"POST","path":"/ai-tenant-e2e-shared-a-4430fb/rate-test-model-4430fb/v1/completions","host":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:08:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0dc0fed-7da5-4463-9e7c-c6ad2c1a831e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44916","PortSpecifier":{"PortValue":44916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368495,"nanos":840434282},"http":{"id":"a0dc0fed-7da5-4463-9e7c-c6ad2c1a831e","method":"POST","headers":{":authority":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4430fb/rate-test-model-4430fb/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:08:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a0dc0fed-7da5-4463-9e7c-c6ad2c1a831e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-jz7BfXarnoDg1N2T_UTXFTfP0l2zfdZFj3xJuIrxFApSW8od94oZ8j49UIsL"} {"level":"debug","ts":"2026-07-06T20:08:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a0dc0fed-7da5-4463-9e7c-c6ad2c1a831e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4430fb.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-jz7BfXarnoDg1N2T_UTXFTfP0l2zfdZFj3xJuIrxFApSW8od94oZ8j49UIsL\"}"} {"level":"debug","ts":"2026-07-06T20:08:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a0dc0fed-7da5-4463-9e7c-c6ad2c1a831e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4430fb.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f8aac043-3dad-43fe-b389-30aea08ebd6d","keyName":"e2e-rate-a-75f64c","subscription":"e2e-rate-iso-a-75f64c","tenant":"e2e-shared-a-4430fb","userId":"f8aac043-3dad-43fe-b389-30aea08ebd6d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T20:08:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a0dc0fed-7da5-4463-9e7c-c6ad2c1a831e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4430fb.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4430fb/rate-test-model-4430fb\",\"requestedSubscription\":\"e2e-rate-iso-a-75f64c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T20:08:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a0dc0fed-7da5-4463-9e7c-c6ad2c1a831e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4430fb.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4430fb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-75f64c","namespace":"ai-tenant-e2e-shared-a-4430fb","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T20:08:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a0dc0fed-7da5-4463-9e7c-c6ad2c1a831e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:08:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0dc0fed-7da5-4463-9e7c-c6ad2c1a831e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:08:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0dc0fed-7da5-4463-9e7c-c6ad2c1a831e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:08:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0dc0fed-7da5-4463-9e7c-c6ad2c1a831e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:08:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0dc0fed-7da5-4463-9e7c-c6ad2c1a831e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4430fb/rate-test-model-4430fb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:08:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0dc0fed-7da5-4463-9e7c-c6ad2c1a831e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T20:08:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0dc0fed-7da5-4463-9e7c-c6ad2c1a831e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:08:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0dc0fed-7da5-4463-9e7c-c6ad2c1a831e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-75f64c"} {"level":"debug","ts":"2026-07-06T20:08:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0dc0fed-7da5-4463-9e7c-c6ad2c1a831e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f8aac043-3dad-43fe-b389-30aea08ebd6d","keyName":"e2e-rate-a-75f64c","selected_subscription":"e2e-rate-iso-a-75f64c","selected_subscription_key":"ai-tenant-e2e-shared-a-4430fb/e2e-rate-iso-a-75f64c@ai-tenant-e2e-shared-a-4430fb/rate-test-model-4430fb","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4430fb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-75f64c","namespace":"ai-tenant-e2e-shared-a-4430fb","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T20:08:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0dc0fed-7da5-4463-9e7c-c6ad2c1a831e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:08:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0dc0fed-7da5-4463-9e7c-c6ad2c1a831e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9966eec9-d48f-4bc4-98d9-145a19b2fce3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39302","PortSpecifier":{"PortValue":39302}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9966eec9-d48f-4bc4-98d9-145a19b2fce3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9966eec9-d48f-4bc4-98d9-145a19b2fce3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39302","PortSpecifier":{"PortValue":39302}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368506,"nanos":946593599},"http":{"id":"9966eec9-d48f-4bc4-98d9-145a19b2fce3","method":"POST","headers":{":authority":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9966eec9-d48f-4bc4-98d9-145a19b2fce3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9966eec9-d48f-4bc4-98d9-145a19b2fce3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e6077e34-2eac-4ffb-9aa1-503949628406","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"]}} {"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9966eec9-d48f-4bc4-98d9-145a19b2fce3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e6077e34-2eac-4ffb-9aa1-503949628406","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0130525c65d3d7e634a1666a16c850b7e5c37ef5470c76545b82aa0120261808"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9966eec9-d48f-4bc4-98d9-145a19b2fce3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9966eec9-d48f-4bc4-98d9-145a19b2fce3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9966eec9-d48f-4bc4-98d9-145a19b2fce3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4430fb/rate-test-model-4430fb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9966eec9-d48f-4bc4-98d9-145a19b2fce3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9966eec9-d48f-4bc4-98d9-145a19b2fce3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9966eec9-d48f-4bc4-98d9-145a19b2fce3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9966eec9-d48f-4bc4-98d9-145a19b2fce3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9966eec9-d48f-4bc4-98d9-145a19b2fce3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:08:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98f57b6e-ad58-47a8-84b9-1c60dbfd6318","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38950","PortSpecifier":{"PortValue":38950}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"98f57b6e-ad58-47a8-84b9-1c60dbfd6318","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:08:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98f57b6e-ad58-47a8-84b9-1c60dbfd6318","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38950","PortSpecifier":{"PortValue":38950}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368507,"nanos":18232195},"http":{"id":"98f57b6e-ad58-47a8-84b9-1c60dbfd6318","method":"POST","headers":{":authority":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:08:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"98f57b6e-ad58-47a8-84b9-1c60dbfd6318","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:08:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"98f57b6e-ad58-47a8-84b9-1c60dbfd6318","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e6077e34-2eac-4ffb-9aa1-503949628406","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"]}} {"level":"debug","ts":"2026-07-06T20:08:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"98f57b6e-ad58-47a8-84b9-1c60dbfd6318","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7aec118cdfb8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa04df12-5d84-4a8b-b552-b028ed948be1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e6077e34-2eac-4ffb-9aa1-503949628406","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:08:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98f57b6e-ad58-47a8-84b9-1c60dbfd6318","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:08:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98f57b6e-ad58-47a8-84b9-1c60dbfd6318","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:08:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98f57b6e-ad58-47a8-84b9-1c60dbfd6318","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-33ae61/rate-test-model-33ae61\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:08:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"98f57b6e-ad58-47a8-84b9-1c60dbfd6318","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:08:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98f57b6e-ad58-47a8-84b9-1c60dbfd6318","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:08:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98f57b6e-ad58-47a8-84b9-1c60dbfd6318","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T20:08:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98f57b6e-ad58-47a8-84b9-1c60dbfd6318","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:08:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98f57b6e-ad58-47a8-84b9-1c60dbfd6318","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:08:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df188dde-73eb-4569-a74e-7ca793a2c7fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39304","PortSpecifier":{"PortValue":39304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"df188dde-73eb-4569-a74e-7ca793a2c7fb","method":"POST","path":"/ai-tenant-e2e-shared-a-4430fb/rate-test-model-4430fb/v1/completions","host":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:08:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df188dde-73eb-4569-a74e-7ca793a2c7fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39304","PortSpecifier":{"PortValue":39304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368507,"nanos":60021667},"http":{"id":"df188dde-73eb-4569-a74e-7ca793a2c7fb","method":"POST","headers":{":authority":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4430fb/rate-test-model-4430fb/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:08:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"df188dde-73eb-4569-a74e-7ca793a2c7fb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1erYgLReS4A7G2Sn0_kuDcr2RyXMgYKJULwfvxZz5AX7aDmN0SO5rOGFOW535"} {"level":"debug","ts":"2026-07-06T20:08:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"df188dde-73eb-4569-a74e-7ca793a2c7fb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4430fb.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1erYgLReS4A7G2Sn0_kuDcr2RyXMgYKJULwfvxZz5AX7aDmN0SO5rOGFOW535\"}"} {"level":"debug","ts":"2026-07-06T20:08:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"df188dde-73eb-4569-a74e-7ca793a2c7fb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4430fb.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7a417823-c337-4ab1-bd4b-b05969933c42","keyName":"e2e-rate-a-ea49e8","subscription":"e2e-rate-iso-a-ea49e8","tenant":"e2e-shared-a-4430fb","userId":"7a417823-c337-4ab1-bd4b-b05969933c42","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T20:08:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"df188dde-73eb-4569-a74e-7ca793a2c7fb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4430fb.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4430fb/rate-test-model-4430fb\",\"requestedSubscription\":\"e2e-rate-iso-a-ea49e8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T20:08:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"df188dde-73eb-4569-a74e-7ca793a2c7fb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4430fb.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4430fb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ea49e8","namespace":"ai-tenant-e2e-shared-a-4430fb","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T20:08:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"df188dde-73eb-4569-a74e-7ca793a2c7fb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:08:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df188dde-73eb-4569-a74e-7ca793a2c7fb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:08:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df188dde-73eb-4569-a74e-7ca793a2c7fb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:08:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df188dde-73eb-4569-a74e-7ca793a2c7fb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4430fb/rate-test-model-4430fb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:08:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df188dde-73eb-4569-a74e-7ca793a2c7fb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:08:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df188dde-73eb-4569-a74e-7ca793a2c7fb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T20:08:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df188dde-73eb-4569-a74e-7ca793a2c7fb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:08:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df188dde-73eb-4569-a74e-7ca793a2c7fb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ea49e8"} {"level":"debug","ts":"2026-07-06T20:08:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df188dde-73eb-4569-a74e-7ca793a2c7fb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7a417823-c337-4ab1-bd4b-b05969933c42","keyName":"e2e-rate-a-ea49e8","selected_subscription":"e2e-rate-iso-a-ea49e8","selected_subscription_key":"ai-tenant-e2e-shared-a-4430fb/e2e-rate-iso-a-ea49e8@ai-tenant-e2e-shared-a-4430fb/rate-test-model-4430fb","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4430fb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ea49e8","namespace":"ai-tenant-e2e-shared-a-4430fb","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T20:08:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df188dde-73eb-4569-a74e-7ca793a2c7fb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:08:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df188dde-73eb-4569-a74e-7ca793a2c7fb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:08:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56b962be-1ee3-93ac-bb84-9f8aa03b4c77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39308","PortSpecifier":{"PortValue":39308}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"56b962be-1ee3-93ac-bb84-9f8aa03b4c77","method":"POST","path":"/ai-tenant-e2e-shared-a-4430fb/rate-test-model-4430fb/v1/completions","host":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:08:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56b962be-1ee3-93ac-bb84-9f8aa03b4c77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39308","PortSpecifier":{"PortValue":39308}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368508,"nanos":105751781},"http":{"id":"56b962be-1ee3-93ac-bb84-9f8aa03b4c77","method":"POST","headers":{":authority":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4430fb/rate-test-model-4430fb/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:08:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"56b962be-1ee3-93ac-bb84-9f8aa03b4c77","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1erYgLReS4A7G2Sn0_kuDcr2RyXMgYKJULwfvxZz5AX7aDmN0SO5rOGFOW535"} {"level":"debug","ts":"2026-07-06T20:08:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"56b962be-1ee3-93ac-bb84-9f8aa03b4c77","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4430fb.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1erYgLReS4A7G2Sn0_kuDcr2RyXMgYKJULwfvxZz5AX7aDmN0SO5rOGFOW535\"}"} {"level":"debug","ts":"2026-07-06T20:08:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"56b962be-1ee3-93ac-bb84-9f8aa03b4c77","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4430fb.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7a417823-c337-4ab1-bd4b-b05969933c42","keyName":"e2e-rate-a-ea49e8","subscription":"e2e-rate-iso-a-ea49e8","tenant":"e2e-shared-a-4430fb","userId":"7a417823-c337-4ab1-bd4b-b05969933c42","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T20:08:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"56b962be-1ee3-93ac-bb84-9f8aa03b4c77","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4430fb.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4430fb/rate-test-model-4430fb\",\"requestedSubscription\":\"e2e-rate-iso-a-ea49e8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T20:08:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"56b962be-1ee3-93ac-bb84-9f8aa03b4c77","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4430fb.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4430fb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ea49e8","namespace":"ai-tenant-e2e-shared-a-4430fb","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T20:08:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"56b962be-1ee3-93ac-bb84-9f8aa03b4c77","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:08:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56b962be-1ee3-93ac-bb84-9f8aa03b4c77","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:08:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56b962be-1ee3-93ac-bb84-9f8aa03b4c77","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:08:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56b962be-1ee3-93ac-bb84-9f8aa03b4c77","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4430fb/rate-test-model-4430fb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:08:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56b962be-1ee3-93ac-bb84-9f8aa03b4c77","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:08:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56b962be-1ee3-93ac-bb84-9f8aa03b4c77","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ea49e8"} {"level":"debug","ts":"2026-07-06T20:08:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56b962be-1ee3-93ac-bb84-9f8aa03b4c77","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:08:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56b962be-1ee3-93ac-bb84-9f8aa03b4c77","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T20:08:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56b962be-1ee3-93ac-bb84-9f8aa03b4c77","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7a417823-c337-4ab1-bd4b-b05969933c42","keyName":"e2e-rate-a-ea49e8","selected_subscription":"e2e-rate-iso-a-ea49e8","selected_subscription_key":"ai-tenant-e2e-shared-a-4430fb/e2e-rate-iso-a-ea49e8@ai-tenant-e2e-shared-a-4430fb/rate-test-model-4430fb","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4430fb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ea49e8","namespace":"ai-tenant-e2e-shared-a-4430fb","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T20:08:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56b962be-1ee3-93ac-bb84-9f8aa03b4c77","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:08:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56b962be-1ee3-93ac-bb84-9f8aa03b4c77","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:08:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e8f7a0d5-644a-4132-8e06-f0d03f3990d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39322","PortSpecifier":{"PortValue":39322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e8f7a0d5-644a-4132-8e06-f0d03f3990d1","method":"POST","path":"/ai-tenant-e2e-shared-a-4430fb/rate-test-model-4430fb/v1/completions","host":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:08:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e8f7a0d5-644a-4132-8e06-f0d03f3990d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39322","PortSpecifier":{"PortValue":39322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368509,"nanos":150325540},"http":{"id":"e8f7a0d5-644a-4132-8e06-f0d03f3990d1","method":"POST","headers":{":authority":"e2e-shared-a-4430fb.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4430fb/rate-test-model-4430fb/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:08:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e8f7a0d5-644a-4132-8e06-f0d03f3990d1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1erYgLReS4A7G2Sn0_kuDcr2RyXMgYKJULwfvxZz5AX7aDmN0SO5rOGFOW535"} {"level":"debug","ts":"2026-07-06T20:08:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e8f7a0d5-644a-4132-8e06-f0d03f3990d1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4430fb.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1erYgLReS4A7G2Sn0_kuDcr2RyXMgYKJULwfvxZz5AX7aDmN0SO5rOGFOW535\"}"} {"level":"debug","ts":"2026-07-06T20:08:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e8f7a0d5-644a-4132-8e06-f0d03f3990d1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4430fb.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7a417823-c337-4ab1-bd4b-b05969933c42","keyName":"e2e-rate-a-ea49e8","subscription":"e2e-rate-iso-a-ea49e8","tenant":"e2e-shared-a-4430fb","userId":"7a417823-c337-4ab1-bd4b-b05969933c42","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T20:08:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e8f7a0d5-644a-4132-8e06-f0d03f3990d1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4430fb.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4430fb/rate-test-model-4430fb\",\"requestedSubscription\":\"e2e-rate-iso-a-ea49e8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T20:08:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e8f7a0d5-644a-4132-8e06-f0d03f3990d1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4430fb.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4430fb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ea49e8","namespace":"ai-tenant-e2e-shared-a-4430fb","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T20:08:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e8f7a0d5-644a-4132-8e06-f0d03f3990d1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:08:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8f7a0d5-644a-4132-8e06-f0d03f3990d1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:08:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8f7a0d5-644a-4132-8e06-f0d03f3990d1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:08:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8f7a0d5-644a-4132-8e06-f0d03f3990d1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4430fb/rate-test-model-4430fb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:08:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8f7a0d5-644a-4132-8e06-f0d03f3990d1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:08:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8f7a0d5-644a-4132-8e06-f0d03f3990d1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ea49e8"} {"level":"debug","ts":"2026-07-06T20:08:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8f7a0d5-644a-4132-8e06-f0d03f3990d1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:08:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8f7a0d5-644a-4132-8e06-f0d03f3990d1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T20:08:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8f7a0d5-644a-4132-8e06-f0d03f3990d1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7a417823-c337-4ab1-bd4b-b05969933c42","keyName":"e2e-rate-a-ea49e8","selected_subscription":"e2e-rate-iso-a-ea49e8","selected_subscription_key":"ai-tenant-e2e-shared-a-4430fb/e2e-rate-iso-a-ea49e8@ai-tenant-e2e-shared-a-4430fb/rate-test-model-4430fb","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4430fb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ea49e8","namespace":"ai-tenant-e2e-shared-a-4430fb","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T20:08:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e8f7a0d5-644a-4132-8e06-f0d03f3990d1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:08:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e8f7a0d5-644a-4132-8e06-f0d03f3990d1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:08:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d813aab0-b3bc-42fb-b6a6-dc055486a5a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38956","PortSpecifier":{"PortValue":38956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d813aab0-b3bc-42fb-b6a6-dc055486a5a9","method":"POST","path":"/ai-tenant-e2e-shared-b-33ae61/rate-test-model-33ae61/v1/completions","host":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:08:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d813aab0-b3bc-42fb-b6a6-dc055486a5a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38956","PortSpecifier":{"PortValue":38956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368509,"nanos":188816358},"http":{"id":"d813aab0-b3bc-42fb-b6a6-dc055486a5a9","method":"POST","headers":{":authority":"e2e-shared-b-33ae61.apps.4253aaa0-a0ef-4256-8795-7aec118cdfb8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-33ae61/rate-test-model-33ae61/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:08:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d813aab0-b3bc-42fb-b6a6-dc055486a5a9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-nZTp5CwsiK0sKdxY_OfddJtdCDAN19UJsjcQrcV6rEH6f20WGtDBpCubGB3T"} {"level":"debug","ts":"2026-07-06T20:08:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d813aab0-b3bc-42fb-b6a6-dc055486a5a9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-33ae61.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-nZTp5CwsiK0sKdxY_OfddJtdCDAN19UJsjcQrcV6rEH6f20WGtDBpCubGB3T\"}"} {"level":"debug","ts":"2026-07-06T20:08:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d813aab0-b3bc-42fb-b6a6-dc055486a5a9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-33ae61.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f38ff4b8-733a-4eb4-991b-dc467f69f0a6","keyName":"e2e-rate-b-ea49e8","subscription":"e2e-rate-iso-b-ea49e8","tenant":"e2e-shared-b-33ae61","userId":"f38ff4b8-733a-4eb4-991b-dc467f69f0a6","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T20:08:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d813aab0-b3bc-42fb-b6a6-dc055486a5a9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-33ae61.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-33ae61/rate-test-model-33ae61\",\"requestedSubscription\":\"e2e-rate-iso-b-ea49e8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T20:08:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d813aab0-b3bc-42fb-b6a6-dc055486a5a9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-33ae61.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-33ae61","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-ea49e8","namespace":"ai-tenant-e2e-shared-b-33ae61","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T20:08:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d813aab0-b3bc-42fb-b6a6-dc055486a5a9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:08:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d813aab0-b3bc-42fb-b6a6-dc055486a5a9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:08:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d813aab0-b3bc-42fb-b6a6-dc055486a5a9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:08:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d813aab0-b3bc-42fb-b6a6-dc055486a5a9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:08:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d813aab0-b3bc-42fb-b6a6-dc055486a5a9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-33ae61/rate-test-model-33ae61\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:08:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d813aab0-b3bc-42fb-b6a6-dc055486a5a9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:08:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d813aab0-b3bc-42fb-b6a6-dc055486a5a9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T20:08:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d813aab0-b3bc-42fb-b6a6-dc055486a5a9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-ea49e8"} {"level":"debug","ts":"2026-07-06T20:08:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d813aab0-b3bc-42fb-b6a6-dc055486a5a9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f38ff4b8-733a-4eb4-991b-dc467f69f0a6","keyName":"e2e-rate-b-ea49e8","selected_subscription":"e2e-rate-iso-b-ea49e8","selected_subscription_key":"ai-tenant-e2e-shared-b-33ae61/e2e-rate-iso-b-ea49e8@ai-tenant-e2e-shared-b-33ae61/rate-test-model-33ae61","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-33ae61","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-ea49e8","namespace":"ai-tenant-e2e-shared-b-33ae61","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T20:08:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d813aab0-b3bc-42fb-b6a6-dc055486a5a9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:08:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d813aab0-b3bc-42fb-b6a6-dc055486a5a9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d56a4c279d0c7fc6679ce19e05b2b94aed8ae63e0d6a3f708ed37b246d2a5d87"} {"level":"info","ts":"2026-07-06T20:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e18c089a6db3455a9362c67ba248596d88378de8f78819b4ab7bbd070ab84c55"} {"level":"info","ts":"2026-07-06T20:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b2c031d0e731d45312ecb4d22f60f100a84a95813fa2bb1c2f3497b6222e32d"} {"level":"info","ts":"2026-07-06T20:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0130525c65d3d7e634a1666a16c850b7e5c37ef5470c76545b82aa0120261808"} {"level":"info","ts":"2026-07-06T20:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f80490065df4f85503cff28bdbcc552be6ddc46a7bff38ae71273ac7e29f2154"} {"level":"info","ts":"2026-07-06T20:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81c82e5fb7ca636533c19eba187c2824edf6837fa0dd92e5b83012dab3b86ce5"} {"level":"info","ts":"2026-07-06T20:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b088ed01780cd14cc05cbf04a3876e125a34e29b41ce78ed68e50facb198017"} {"level":"info","ts":"2026-07-06T20:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6df3f9d2e50ca1d1086bc7de2b1892000dff39eddc3909c9f2d7d3115f21b34"} {"level":"info","ts":"2026-07-06T20:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2c90325dfdba4b601b3518467b6c49ee73f82064b85abc53612f8fe45524330"} {"level":"info","ts":"2026-07-06T20:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8553ec1ca2a7a71b859e990fb20dbaeffa577f17d8efbf4821762df9554cafde"} {"level":"info","ts":"2026-07-06T20:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca0dae68b105c77c6f296c772c69173ff9d09be44eafb8e0d69212bb214b7c3e"} {"level":"info","ts":"2026-07-06T20:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5dd402389dc9a60245938c7634a94b81d3855a780acfc2a9af02cc0e61d4a57c"} {"level":"info","ts":"2026-07-06T20:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eab323116f1676f271512b8c53f8dba788d82c11063ebc1bd2493e5ac4d9bf3f"} {"level":"info","ts":"2026-07-06T20:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1710cf4b37f4bfdbca22fb067c9e085b161376871a4635911d26597a2abfd44e"} {"level":"info","ts":"2026-07-06T20:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/602faccc7531d2adebff9ea15580754a171e956f455a027a4a4c741fa7174cae"} {"level":"info","ts":"2026-07-06T20:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58d21d30e7a60db5d9782a7aade28e71de045899aec818171595757136c22c8a"} {"level":"info","ts":"2026-07-06T20:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d478685329fb83f41be584563217befc9713bfeb51897dfe4906872ac5b3b48c"} {"level":"info","ts":"2026-07-06T20:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/545234286ab7962433a1a084c8c8e9dc4d48101427c07c596bcc9f76834ac5dd"} {"level":"info","ts":"2026-07-06T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e6752935b36cb62838ffa71936a855b6e7dc37ab23d28cfc3e7036197b95a22"} {"level":"info","ts":"2026-07-06T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8cbab4f7c685f5bfc3fdbd35cc3d4dfb2098ebe9e19dd237554f523d7bc9ff3"}