--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7da2788c63945861d7050adb74a8223c542538c55a6409b01449c39d64c83c44","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803"} {"level":"debug","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7da2788c63945861d7050adb74a8223c542538c55a6409b01449c39d64c83c44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7da2788c63945861d7050adb74a8223c542538c55a6409b01449c39d64c83c44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7da2788c63945861d7050adb74a8223c542538c55a6409b01449c39d64c83c44","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7da2788c63945861d7050adb74a8223c542538c55a6409b01449c39d64c83c44"} {"level":"debug","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7da2788c63945861d7050adb74a8223c542538c55a6409b01449c39d64c83c44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7da2788c63945861d7050adb74a8223c542538c55a6409b01449c39d64c83c44"} {"level":"info","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803"} {"level":"debug","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803"} {"level":"debug","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7da2788c63945861d7050adb74a8223c542538c55a6409b01449c39d64c83c44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7da2788c63945861d7050adb74a8223c542538c55a6409b01449c39d64c83c44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7da2788c63945861d7050adb74a8223c542538c55a6409b01449c39d64c83c44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7da2788c63945861d7050adb74a8223c542538c55a6409b01449c39d64c83c44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7da2788c63945861d7050adb74a8223c542538c55a6409b01449c39d64c83c44"} {"level":"info","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7da2788c63945861d7050adb74a8223c542538c55a6409b01449c39d64c83c44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7da2788c63945861d7050adb74a8223c542538c55a6409b01449c39d64c83c44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7da2788c63945861d7050adb74a8223c542538c55a6409b01449c39d64c83c44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803"} {"level":"info","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7da2788c63945861d7050adb74a8223c542538c55a6409b01449c39d64c83c44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7da2788c63945861d7050adb74a8223c542538c55a6409b01449c39d64c83c44"} {"level":"info","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7da2788c63945861d7050adb74a8223c542538c55a6409b01449c39d64c83c44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803"} {"level":"info","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7da2788c63945861d7050adb74a8223c542538c55a6409b01449c39d64c83c44"} {"level":"error","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803"} {"level":"info","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803"} {"level":"debug","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803"} {"level":"debug","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803"} {"level":"debug","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803"} {"level":"debug","ts":"2026-07-16T11:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803"} {"level":"debug","ts":"2026-07-16T11:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803"} {"level":"debug","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36ada736640eb35601c3eef219e07ac26896423b83ce52034549bc19908608ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36ada736640eb35601c3eef219e07ac26896423b83ce52034549bc19908608ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36ada736640eb35601c3eef219e07ac26896423b83ce52034549bc19908608ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36ada736640eb35601c3eef219e07ac26896423b83ce52034549bc19908608ca"} {"level":"debug","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36ada736640eb35601c3eef219e07ac26896423b83ce52034549bc19908608ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36ada736640eb35601c3eef219e07ac26896423b83ce52034549bc19908608ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36ada736640eb35601c3eef219e07ac26896423b83ce52034549bc19908608ca"} {"level":"debug","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36ada736640eb35601c3eef219e07ac26896423b83ce52034549bc19908608ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36ada736640eb35601c3eef219e07ac26896423b83ce52034549bc19908608ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36ada736640eb35601c3eef219e07ac26896423b83ce52034549bc19908608ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36ada736640eb35601c3eef219e07ac26896423b83ce52034549bc19908608ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36ada736640eb35601c3eef219e07ac26896423b83ce52034549bc19908608ca"} {"level":"debug","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"944a6315a27337049d5cbbf8d2acff707c3c7335b11f8dcdfccdca77b30db3b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"944a6315a27337049d5cbbf8d2acff707c3c7335b11f8dcdfccdca77b30db3b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"944a6315a27337049d5cbbf8d2acff707c3c7335b11f8dcdfccdca77b30db3b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"944a6315a27337049d5cbbf8d2acff707c3c7335b11f8dcdfccdca77b30db3b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/944a6315a27337049d5cbbf8d2acff707c3c7335b11f8dcdfccdca77b30db3b7"} {"level":"debug","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"944a6315a27337049d5cbbf8d2acff707c3c7335b11f8dcdfccdca77b30db3b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/944a6315a27337049d5cbbf8d2acff707c3c7335b11f8dcdfccdca77b30db3b7"} {"level":"debug","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"944a6315a27337049d5cbbf8d2acff707c3c7335b11f8dcdfccdca77b30db3b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["944a6315a27337049d5cbbf8d2acff707c3c7335b11f8dcdfccdca77b30db3b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"944a6315a27337049d5cbbf8d2acff707c3c7335b11f8dcdfccdca77b30db3b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"944a6315a27337049d5cbbf8d2acff707c3c7335b11f8dcdfccdca77b30db3b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d9078e00b43e1632de1f68590969cfca4c8a34950350c9b43e2cf9e3d6f8239","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d9078e00b43e1632de1f68590969cfca4c8a34950350c9b43e2cf9e3d6f8239","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d9078e00b43e1632de1f68590969cfca4c8a34950350c9b43e2cf9e3d6f8239","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d9078e00b43e1632de1f68590969cfca4c8a34950350c9b43e2cf9e3d6f8239","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/944a6315a27337049d5cbbf8d2acff707c3c7335b11f8dcdfccdca77b30db3b7"} {"level":"debug","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d9078e00b43e1632de1f68590969cfca4c8a34950350c9b43e2cf9e3d6f8239","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d9078e00b43e1632de1f68590969cfca4c8a34950350c9b43e2cf9e3d6f8239","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d9078e00b43e1632de1f68590969cfca4c8a34950350c9b43e2cf9e3d6f8239","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d9078e00b43e1632de1f68590969cfca4c8a34950350c9b43e2cf9e3d6f8239"} {"level":"debug","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69958c482d0b1bec0aee62ee193e37104415f07e889ac9d2838254b9215b9ef8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d9078e00b43e1632de1f68590969cfca4c8a34950350c9b43e2cf9e3d6f8239"} {"level":"info","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69958c482d0b1bec0aee62ee193e37104415f07e889ac9d2838254b9215b9ef8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d9078e00b43e1632de1f68590969cfca4c8a34950350c9b43e2cf9e3d6f8239","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d9078e00b43e1632de1f68590969cfca4c8a34950350c9b43e2cf9e3d6f8239"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d9078e00b43e1632de1f68590969cfca4c8a34950350c9b43e2cf9e3d6f8239","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69958c482d0b1bec0aee62ee193e37104415f07e889ac9d2838254b9215b9ef8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69958c482d0b1bec0aee62ee193e37104415f07e889ac9d2838254b9215b9ef8"} {"level":"info","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69958c482d0b1bec0aee62ee193e37104415f07e889ac9d2838254b9215b9ef8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d9078e00b43e1632de1f68590969cfca4c8a34950350c9b43e2cf9e3d6f8239","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d9078e00b43e1632de1f68590969cfca4c8a34950350c9b43e2cf9e3d6f8239","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69958c482d0b1bec0aee62ee193e37104415f07e889ac9d2838254b9215b9ef8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69958c482d0b1bec0aee62ee193e37104415f07e889ac9d2838254b9215b9ef8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d9078e00b43e1632de1f68590969cfca4c8a34950350c9b43e2cf9e3d6f8239"} {"level":"info","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69958c482d0b1bec0aee62ee193e37104415f07e889ac9d2838254b9215b9ef8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d9078e00b43e1632de1f68590969cfca4c8a34950350c9b43e2cf9e3d6f8239","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d9078e00b43e1632de1f68590969cfca4c8a34950350c9b43e2cf9e3d6f8239"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69958c482d0b1bec0aee62ee193e37104415f07e889ac9d2838254b9215b9ef8"} {"level":"info","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d9078e00b43e1632de1f68590969cfca4c8a34950350c9b43e2cf9e3d6f8239","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69958c482d0b1bec0aee62ee193e37104415f07e889ac9d2838254b9215b9ef8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d9078e00b43e1632de1f68590969cfca4c8a34950350c9b43e2cf9e3d6f8239","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d9078e00b43e1632de1f68590969cfca4c8a34950350c9b43e2cf9e3d6f8239","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d9078e00b43e1632de1f68590969cfca4c8a34950350c9b43e2cf9e3d6f8239","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d9078e00b43e1632de1f68590969cfca4c8a34950350c9b43e2cf9e3d6f8239"} {"level":"debug","ts":"2026-07-16T11:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d9078e00b43e1632de1f68590969cfca4c8a34950350c9b43e2cf9e3d6f8239","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d9078e00b43e1632de1f68590969cfca4c8a34950350c9b43e2cf9e3d6f8239"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d9078e00b43e1632de1f68590969cfca4c8a34950350c9b43e2cf9e3d6f8239","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d9078e00b43e1632de1f68590969cfca4c8a34950350c9b43e2cf9e3d6f8239","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69958c482d0b1bec0aee62ee193e37104415f07e889ac9d2838254b9215b9ef8"} {"level":"info","ts":"2026-07-16T11:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d9078e00b43e1632de1f68590969cfca4c8a34950350c9b43e2cf9e3d6f8239"} {"level":"info","ts":"2026-07-16T11:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a21d0ddbc17e9d114b61575c029e1d0b458ad5e8a8bbcc18ade3fd0aa7792803"} {"level":"info","ts":"2026-07-16T11:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8efcfbb712af5fa311f0926d42c6f8ed831494149cb0f5f4d1b3e074b29a65e"} {"level":"info","ts":"2026-07-16T11:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7da2788c63945861d7050adb74a8223c542538c55a6409b01449c39d64c83c44"} {"level":"info","ts":"2026-07-16T11:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e211ca31b8bb18293890aad5881e0f4b1b8e086aa6c855d0acb5f9f6e366d0eb"} {"level":"info","ts":"2026-07-16T11:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36ada736640eb35601c3eef219e07ac26896423b83ce52034549bc19908608ca"} {"level":"info","ts":"2026-07-16T11:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/944a6315a27337049d5cbbf8d2acff707c3c7335b11f8dcdfccdca77b30db3b7"} {"level":"info","ts":"2026-07-16T11:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d9078e00b43e1632de1f68590969cfca4c8a34950350c9b43e2cf9e3d6f8239"} {"level":"info","ts":"2026-07-16T11:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69958c482d0b1bec0aee62ee193e37104415f07e889ac9d2838254b9215b9ef8"} {"level":"debug","ts":"2026-07-16T11:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c3754156bb5e0d5d0c3ac9594ba3f506c633096fc9311b4c134c7a4614cc62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c3754156bb5e0d5d0c3ac9594ba3f506c633096fc9311b4c134c7a4614cc62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c3754156bb5e0d5d0c3ac9594ba3f506c633096fc9311b4c134c7a4614cc62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c3754156bb5e0d5d0c3ac9594ba3f506c633096fc9311b4c134c7a4614cc62","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c3754156bb5e0d5d0c3ac9594ba3f506c633096fc9311b4c134c7a4614cc62"} {"level":"debug","ts":"2026-07-16T11:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c3754156bb5e0d5d0c3ac9594ba3f506c633096fc9311b4c134c7a4614cc62","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c3754156bb5e0d5d0c3ac9594ba3f506c633096fc9311b4c134c7a4614cc62"} {"level":"debug","ts":"2026-07-16T11:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c3754156bb5e0d5d0c3ac9594ba3f506c633096fc9311b4c134c7a4614cc62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2c3754156bb5e0d5d0c3ac9594ba3f506c633096fc9311b4c134c7a4614cc62"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c3754156bb5e0d5d0c3ac9594ba3f506c633096fc9311b4c134c7a4614cc62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c3754156bb5e0d5d0c3ac9594ba3f506c633096fc9311b4c134c7a4614cc62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c3754156bb5e0d5d0c3ac9594ba3f506c633096fc9311b4c134c7a4614cc62"} {"level":"debug","ts":"2026-07-16T11:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20"} {"level":"debug","ts":"2026-07-16T11:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20"} {"level":"debug","ts":"2026-07-16T11:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20"} {"level":"debug","ts":"2026-07-16T11:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20"} {"level":"debug","ts":"2026-07-16T11:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c"} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c"} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20"} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c"} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20"} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c"} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20"} {"level":"error","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c"} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c"} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33d598ceb2239933f0478cd208772372cd480cc158ade89d05b67953f6c3e0e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c"} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33d598ceb2239933f0478cd208772372cd480cc158ade89d05b67953f6c3e0e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33d598ceb2239933f0478cd208772372cd480cc158ade89d05b67953f6c3e0e7"} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33d598ceb2239933f0478cd208772372cd480cc158ade89d05b67953f6c3e0e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33d598ceb2239933f0478cd208772372cd480cc158ade89d05b67953f6c3e0e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33d598ceb2239933f0478cd208772372cd480cc158ade89d05b67953f6c3e0e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c"} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33d598ceb2239933f0478cd208772372cd480cc158ade89d05b67953f6c3e0e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33d598ceb2239933f0478cd208772372cd480cc158ade89d05b67953f6c3e0e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33d598ceb2239933f0478cd208772372cd480cc158ade89d05b67953f6c3e0e7"} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33d598ceb2239933f0478cd208772372cd480cc158ade89d05b67953f6c3e0e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33d598ceb2239933f0478cd208772372cd480cc158ade89d05b67953f6c3e0e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c"} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33d598ceb2239933f0478cd208772372cd480cc158ade89d05b67953f6c3e0e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33d598ceb2239933f0478cd208772372cd480cc158ade89d05b67953f6c3e0e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33d598ceb2239933f0478cd208772372cd480cc158ade89d05b67953f6c3e0e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33d598ceb2239933f0478cd208772372cd480cc158ade89d05b67953f6c3e0e7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33d598ceb2239933f0478cd208772372cd480cc158ade89d05b67953f6c3e0e7"} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33d598ceb2239933f0478cd208772372cd480cc158ade89d05b67953f6c3e0e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33d598ceb2239933f0478cd208772372cd480cc158ade89d05b67953f6c3e0e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33d598ceb2239933f0478cd208772372cd480cc158ade89d05b67953f6c3e0e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33d598ceb2239933f0478cd208772372cd480cc158ade89d05b67953f6c3e0e7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c"} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33d598ceb2239933f0478cd208772372cd480cc158ade89d05b67953f6c3e0e7"} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4c8c21afe99d61fbdda31277453291f64da2e901486688aaddf2192ed88b50b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4c8c21afe99d61fbdda31277453291f64da2e901486688aaddf2192ed88b50b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f44dd405adb19268ec9f4e77ddec5e59c6647ebba7703d9abd2f6ed5603bdacd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4c8c21afe99d61fbdda31277453291f64da2e901486688aaddf2192ed88b50b"} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f44dd405adb19268ec9f4e77ddec5e59c6647ebba7703d9abd2f6ed5603bdacd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4c8c21afe99d61fbdda31277453291f64da2e901486688aaddf2192ed88b50b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4c8c21afe99d61fbdda31277453291f64da2e901486688aaddf2192ed88b50b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4c8c21afe99d61fbdda31277453291f64da2e901486688aaddf2192ed88b50b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f44dd405adb19268ec9f4e77ddec5e59c6647ebba7703d9abd2f6ed5603bdacd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f44dd405adb19268ec9f4e77ddec5e59c6647ebba7703d9abd2f6ed5603bdacd"} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f44dd405adb19268ec9f4e77ddec5e59c6647ebba7703d9abd2f6ed5603bdacd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4c8c21afe99d61fbdda31277453291f64da2e901486688aaddf2192ed88b50b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4c8c21afe99d61fbdda31277453291f64da2e901486688aaddf2192ed88b50b"} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4c8c21afe99d61fbdda31277453291f64da2e901486688aaddf2192ed88b50b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f44dd405adb19268ec9f4e77ddec5e59c6647ebba7703d9abd2f6ed5603bdacd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4c8c21afe99d61fbdda31277453291f64da2e901486688aaddf2192ed88b50b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4c8c21afe99d61fbdda31277453291f64da2e901486688aaddf2192ed88b50b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4c8c21afe99d61fbdda31277453291f64da2e901486688aaddf2192ed88b50b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4c8c21afe99d61fbdda31277453291f64da2e901486688aaddf2192ed88b50b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4c8c21afe99d61fbdda31277453291f64da2e901486688aaddf2192ed88b50b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f44dd405adb19268ec9f4e77ddec5e59c6647ebba7703d9abd2f6ed5603bdacd"} {"level":"error","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e4c8c21afe99d61fbdda31277453291f64da2e901486688aaddf2192ed88b50b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e4c8c21afe99d61fbdda31277453291f64da2e901486688aaddf2192ed88b50b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f44dd405adb19268ec9f4e77ddec5e59c6647ebba7703d9abd2f6ed5603bdacd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f44dd405adb19268ec9f4e77ddec5e59c6647ebba7703d9abd2f6ed5603bdacd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f44dd405adb19268ec9f4e77ddec5e59c6647ebba7703d9abd2f6ed5603bdacd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4c8c21afe99d61fbdda31277453291f64da2e901486688aaddf2192ed88b50b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4c8c21afe99d61fbdda31277453291f64da2e901486688aaddf2192ed88b50b"} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4c8c21afe99d61fbdda31277453291f64da2e901486688aaddf2192ed88b50b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f44dd405adb19268ec9f4e77ddec5e59c6647ebba7703d9abd2f6ed5603bdacd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f44dd405adb19268ec9f4e77ddec5e59c6647ebba7703d9abd2f6ed5603bdacd"} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f44dd405adb19268ec9f4e77ddec5e59c6647ebba7703d9abd2f6ed5603bdacd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc98910087a356029bd4f81a0454a61e12dbdb9646d2184993f3b68bd936f9db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc98910087a356029bd4f81a0454a61e12dbdb9646d2184993f3b68bd936f9db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4c8c21afe99d61fbdda31277453291f64da2e901486688aaddf2192ed88b50b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4c8c21afe99d61fbdda31277453291f64da2e901486688aaddf2192ed88b50b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc98910087a356029bd4f81a0454a61e12dbdb9646d2184993f3b68bd936f9db"} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4c8c21afe99d61fbdda31277453291f64da2e901486688aaddf2192ed88b50b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f44dd405adb19268ec9f4e77ddec5e59c6647ebba7703d9abd2f6ed5603bdacd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f44dd405adb19268ec9f4e77ddec5e59c6647ebba7703d9abd2f6ed5603bdacd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4c8c21afe99d61fbdda31277453291f64da2e901486688aaddf2192ed88b50b"} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f44dd405adb19268ec9f4e77ddec5e59c6647ebba7703d9abd2f6ed5603bdacd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc98910087a356029bd4f81a0454a61e12dbdb9646d2184993f3b68bd936f9db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc98910087a356029bd4f81a0454a61e12dbdb9646d2184993f3b68bd936f9db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb"} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc98910087a356029bd4f81a0454a61e12dbdb9646d2184993f3b68bd936f9db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4c8c21afe99d61fbdda31277453291f64da2e901486688aaddf2192ed88b50b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f44dd405adb19268ec9f4e77ddec5e59c6647ebba7703d9abd2f6ed5603bdacd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f44dd405adb19268ec9f4e77ddec5e59c6647ebba7703d9abd2f6ed5603bdacd"} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f44dd405adb19268ec9f4e77ddec5e59c6647ebba7703d9abd2f6ed5603bdacd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092ad0e27bbde4ca8b0a6baaa2ece7401c379018e1a796d10591850772675a4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092ad0e27bbde4ca8b0a6baaa2ece7401c379018e1a796d10591850772675a4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc98910087a356029bd4f81a0454a61e12dbdb9646d2184993f3b68bd936f9db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc98910087a356029bd4f81a0454a61e12dbdb9646d2184993f3b68bd936f9db"} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc98910087a356029bd4f81a0454a61e12dbdb9646d2184993f3b68bd936f9db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb9bbe08a081b52fa3a384ebebd259853dbf0c99704115d06419ad0debd2de25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4c8c21afe99d61fbdda31277453291f64da2e901486688aaddf2192ed88b50b"} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb9bbe08a081b52fa3a384ebebd259853dbf0c99704115d06419ad0debd2de25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e0f1950cdb8c8e717bcd826396d0ba4d5888add649bb025fa726975999ff960","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e0f1950cdb8c8e717bcd826396d0ba4d5888add649bb025fa726975999ff960","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f44dd405adb19268ec9f4e77ddec5e59c6647ebba7703d9abd2f6ed5603bdacd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f44dd405adb19268ec9f4e77ddec5e59c6647ebba7703d9abd2f6ed5603bdacd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092ad0e27bbde4ca8b0a6baaa2ece7401c379018e1a796d10591850772675a4b"} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f44dd405adb19268ec9f4e77ddec5e59c6647ebba7703d9abd2f6ed5603bdacd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092ad0e27bbde4ca8b0a6baaa2ece7401c379018e1a796d10591850772675a4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["092ad0e27bbde4ca8b0a6baaa2ece7401c379018e1a796d10591850772675a4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb9bbe08a081b52fa3a384ebebd259853dbf0c99704115d06419ad0debd2de25"} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb"} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e0f1950cdb8c8e717bcd826396d0ba4d5888add649bb025fa726975999ff960"} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092ad0e27bbde4ca8b0a6baaa2ece7401c379018e1a796d10591850772675a4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc98910087a356029bd4f81a0454a61e12dbdb9646d2184993f3b68bd936f9db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc98910087a356029bd4f81a0454a61e12dbdb9646d2184993f3b68bd936f9db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f44dd405adb19268ec9f4e77ddec5e59c6647ebba7703d9abd2f6ed5603bdacd"} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc98910087a356029bd4f81a0454a61e12dbdb9646d2184993f3b68bd936f9db"} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc98910087a356029bd4f81a0454a61e12dbdb9646d2184993f3b68bd936f9db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb9bbe08a081b52fa3a384ebebd259853dbf0c99704115d06419ad0debd2de25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb9bbe08a081b52fa3a384ebebd259853dbf0c99704115d06419ad0debd2de25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/461c6918d0039fcffd036177cdec625134e131477b5467b5262d28b4c7ce23b9"} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092ad0e27bbde4ca8b0a6baaa2ece7401c379018e1a796d10591850772675a4b"} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc98910087a356029bd4f81a0454a61e12dbdb9646d2184993f3b68bd936f9db"} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb9bbe08a081b52fa3a384ebebd259853dbf0c99704115d06419ad0debd2de25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e0f1950cdb8c8e717bcd826396d0ba4d5888add649bb025fa726975999ff960","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e0f1950cdb8c8e717bcd826396d0ba4d5888add649bb025fa726975999ff960"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb9bbe08a081b52fa3a384ebebd259853dbf0c99704115d06419ad0debd2de25"} {"level":"info","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e0f1950cdb8c8e717bcd826396d0ba4d5888add649bb025fa726975999ff960","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"461c6918d0039fcffd036177cdec625134e131477b5467b5262d28b4c7ce23b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["461c6918d0039fcffd036177cdec625134e131477b5467b5262d28b4c7ce23b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e0f1950cdb8c8e717bcd826396d0ba4d5888add649bb025fa726975999ff960"} {"level":"info","ts":"2026-07-16T11:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"461c6918d0039fcffd036177cdec625134e131477b5467b5262d28b4c7ce23b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f44dd405adb19268ec9f4e77ddec5e59c6647ebba7703d9abd2f6ed5603bdacd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"092ad0e27bbde4ca8b0a6baaa2ece7401c379018e1a796d10591850772675a4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc98910087a356029bd4f81a0454a61e12dbdb9646d2184993f3b68bd936f9db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb9bbe08a081b52fa3a384ebebd259853dbf0c99704115d06419ad0debd2de25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e0f1950cdb8c8e717bcd826396d0ba4d5888add649bb025fa726975999ff960","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"461c6918d0039fcffd036177cdec625134e131477b5467b5262d28b4c7ce23b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/461c6918d0039fcffd036177cdec625134e131477b5467b5262d28b4c7ce23b9"} {"level":"info","ts":"2026-07-16T11:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"461c6918d0039fcffd036177cdec625134e131477b5467b5262d28b4c7ce23b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"461c6918d0039fcffd036177cdec625134e131477b5467b5262d28b4c7ce23b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"461c6918d0039fcffd036177cdec625134e131477b5467b5262d28b4c7ce23b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/461c6918d0039fcffd036177cdec625134e131477b5467b5262d28b4c7ce23b9"} {"level":"debug","ts":"2026-07-16T11:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"461c6918d0039fcffd036177cdec625134e131477b5467b5262d28b4c7ce23b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["461c6918d0039fcffd036177cdec625134e131477b5467b5262d28b4c7ce23b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"461c6918d0039fcffd036177cdec625134e131477b5467b5262d28b4c7ce23b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"461c6918d0039fcffd036177cdec625134e131477b5467b5262d28b4c7ce23b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/461c6918d0039fcffd036177cdec625134e131477b5467b5262d28b4c7ce23b9"} {"level":"debug","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d2c93c45bcd59ef2f5b998ab0bdb41e56aa9853f43d1528f6dc32ee98eb3645","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d2c93c45bcd59ef2f5b998ab0bdb41e56aa9853f43d1528f6dc32ee98eb3645","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d2c93c45bcd59ef2f5b998ab0bdb41e56aa9853f43d1528f6dc32ee98eb3645","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d2c93c45bcd59ef2f5b998ab0bdb41e56aa9853f43d1528f6dc32ee98eb3645","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d2c93c45bcd59ef2f5b998ab0bdb41e56aa9853f43d1528f6dc32ee98eb3645"} {"level":"debug","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d2c93c45bcd59ef2f5b998ab0bdb41e56aa9853f43d1528f6dc32ee98eb3645","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d2c93c45bcd59ef2f5b998ab0bdb41e56aa9853f43d1528f6dc32ee98eb3645"} {"level":"debug","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d2c93c45bcd59ef2f5b998ab0bdb41e56aa9853f43d1528f6dc32ee98eb3645","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d2c93c45bcd59ef2f5b998ab0bdb41e56aa9853f43d1528f6dc32ee98eb3645"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d2c93c45bcd59ef2f5b998ab0bdb41e56aa9853f43d1528f6dc32ee98eb3645","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d2c93c45bcd59ef2f5b998ab0bdb41e56aa9853f43d1528f6dc32ee98eb3645","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d2c93c45bcd59ef2f5b998ab0bdb41e56aa9853f43d1528f6dc32ee98eb3645","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aa8e15e8b4bf48abc534319402de63234fbb321e1de36ba4b711f4d3a0ad357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d2c93c45bcd59ef2f5b998ab0bdb41e56aa9853f43d1528f6dc32ee98eb3645"} {"level":"info","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aa8e15e8b4bf48abc534319402de63234fbb321e1de36ba4b711f4d3a0ad357","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d2c93c45bcd59ef2f5b998ab0bdb41e56aa9853f43d1528f6dc32ee98eb3645","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d2c93c45bcd59ef2f5b998ab0bdb41e56aa9853f43d1528f6dc32ee98eb3645"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aa8e15e8b4bf48abc534319402de63234fbb321e1de36ba4b711f4d3a0ad357"} {"level":"info","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d2c93c45bcd59ef2f5b998ab0bdb41e56aa9853f43d1528f6dc32ee98eb3645","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aa8e15e8b4bf48abc534319402de63234fbb321e1de36ba4b711f4d3a0ad357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aa8e15e8b4bf48abc534319402de63234fbb321e1de36ba4b711f4d3a0ad357"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aa8e15e8b4bf48abc534319402de63234fbb321e1de36ba4b711f4d3a0ad357","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d2c93c45bcd59ef2f5b998ab0bdb41e56aa9853f43d1528f6dc32ee98eb3645","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d2c93c45bcd59ef2f5b998ab0bdb41e56aa9853f43d1528f6dc32ee98eb3645"} {"level":"info","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d2c93c45bcd59ef2f5b998ab0bdb41e56aa9853f43d1528f6dc32ee98eb3645","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aa8e15e8b4bf48abc534319402de63234fbb321e1de36ba4b711f4d3a0ad357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aa8e15e8b4bf48abc534319402de63234fbb321e1de36ba4b711f4d3a0ad357"} {"level":"info","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aa8e15e8b4bf48abc534319402de63234fbb321e1de36ba4b711f4d3a0ad357","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d2c93c45bcd59ef2f5b998ab0bdb41e56aa9853f43d1528f6dc32ee98eb3645","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aa8e15e8b4bf48abc534319402de63234fbb321e1de36ba4b711f4d3a0ad357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aa8e15e8b4bf48abc534319402de63234fbb321e1de36ba4b711f4d3a0ad357"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aa8e15e8b4bf48abc534319402de63234fbb321e1de36ba4b711f4d3a0ad357","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d2c93c45bcd59ef2f5b998ab0bdb41e56aa9853f43d1528f6dc32ee98eb3645","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aa8e15e8b4bf48abc534319402de63234fbb321e1de36ba4b711f4d3a0ad357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aa8e15e8b4bf48abc534319402de63234fbb321e1de36ba4b711f4d3a0ad357"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d2c93c45bcd59ef2f5b998ab0bdb41e56aa9853f43d1528f6dc32ee98eb3645"} {"level":"error","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7aa8e15e8b4bf48abc534319402de63234fbb321e1de36ba4b711f4d3a0ad357","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7aa8e15e8b4bf48abc534319402de63234fbb321e1de36ba4b711f4d3a0ad357\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64962d388cc83270c48a728c4d3e6344ee9a82695928e8c4a8c6da1d70d36340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64962d388cc83270c48a728c4d3e6344ee9a82695928e8c4a8c6da1d70d36340","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aa8e15e8b4bf48abc534319402de63234fbb321e1de36ba4b711f4d3a0ad357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aa8e15e8b4bf48abc534319402de63234fbb321e1de36ba4b711f4d3a0ad357","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d2c93c45bcd59ef2f5b998ab0bdb41e56aa9853f43d1528f6dc32ee98eb3645","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d2c93c45bcd59ef2f5b998ab0bdb41e56aa9853f43d1528f6dc32ee98eb3645"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aa8e15e8b4bf48abc534319402de63234fbb321e1de36ba4b711f4d3a0ad357"} {"level":"info","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d2c93c45bcd59ef2f5b998ab0bdb41e56aa9853f43d1528f6dc32ee98eb3645","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64962d388cc83270c48a728c4d3e6344ee9a82695928e8c4a8c6da1d70d36340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64962d388cc83270c48a728c4d3e6344ee9a82695928e8c4a8c6da1d70d36340","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aa8e15e8b4bf48abc534319402de63234fbb321e1de36ba4b711f4d3a0ad357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aa8e15e8b4bf48abc534319402de63234fbb321e1de36ba4b711f4d3a0ad357"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aa8e15e8b4bf48abc534319402de63234fbb321e1de36ba4b711f4d3a0ad357","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d2c93c45bcd59ef2f5b998ab0bdb41e56aa9853f43d1528f6dc32ee98eb3645","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64962d388cc83270c48a728c4d3e6344ee9a82695928e8c4a8c6da1d70d36340","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aa8e15e8b4bf48abc534319402de63234fbb321e1de36ba4b711f4d3a0ad357","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64962d388cc83270c48a728c4d3e6344ee9a82695928e8c4a8c6da1d70d36340"} {"level":"debug","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64962d388cc83270c48a728c4d3e6344ee9a82695928e8c4a8c6da1d70d36340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64962d388cc83270c48a728c4d3e6344ee9a82695928e8c4a8c6da1d70d36340"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aa8e15e8b4bf48abc534319402de63234fbb321e1de36ba4b711f4d3a0ad357"} {"level":"info","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64962d388cc83270c48a728c4d3e6344ee9a82695928e8c4a8c6da1d70d36340","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d2c93c45bcd59ef2f5b998ab0bdb41e56aa9853f43d1528f6dc32ee98eb3645"} {"level":"info","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64962d388cc83270c48a728c4d3e6344ee9a82695928e8c4a8c6da1d70d36340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64962d388cc83270c48a728c4d3e6344ee9a82695928e8c4a8c6da1d70d36340","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64962d388cc83270c48a728c4d3e6344ee9a82695928e8c4a8c6da1d70d36340","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64962d388cc83270c48a728c4d3e6344ee9a82695928e8c4a8c6da1d70d36340"} {"level":"debug","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64962d388cc83270c48a728c4d3e6344ee9a82695928e8c4a8c6da1d70d36340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64962d388cc83270c48a728c4d3e6344ee9a82695928e8c4a8c6da1d70d36340"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64962d388cc83270c48a728c4d3e6344ee9a82695928e8c4a8c6da1d70d36340","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9"} {"level":"info","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64962d388cc83270c48a728c4d3e6344ee9a82695928e8c4a8c6da1d70d36340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64962d388cc83270c48a728c4d3e6344ee9a82695928e8c4a8c6da1d70d36340"} {"level":"info","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64962d388cc83270c48a728c4d3e6344ee9a82695928e8c4a8c6da1d70d36340","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64962d388cc83270c48a728c4d3e6344ee9a82695928e8c4a8c6da1d70d36340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64962d388cc83270c48a728c4d3e6344ee9a82695928e8c4a8c6da1d70d36340"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64962d388cc83270c48a728c4d3e6344ee9a82695928e8c4a8c6da1d70d36340","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64962d388cc83270c48a728c4d3e6344ee9a82695928e8c4a8c6da1d70d36340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64962d388cc83270c48a728c4d3e6344ee9a82695928e8c4a8c6da1d70d36340"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9"} {"level":"error","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"64962d388cc83270c48a728c4d3e6344ee9a82695928e8c4a8c6da1d70d36340","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"64962d388cc83270c48a728c4d3e6344ee9a82695928e8c4a8c6da1d70d36340\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64962d388cc83270c48a728c4d3e6344ee9a82695928e8c4a8c6da1d70d36340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64962d388cc83270c48a728c4d3e6344ee9a82695928e8c4a8c6da1d70d36340","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64962d388cc83270c48a728c4d3e6344ee9a82695928e8c4a8c6da1d70d36340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64962d388cc83270c48a728c4d3e6344ee9a82695928e8c4a8c6da1d70d36340"} {"level":"error","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"64962d388cc83270c48a728c4d3e6344ee9a82695928e8c4a8c6da1d70d36340","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"64962d388cc83270c48a728c4d3e6344ee9a82695928e8c4a8c6da1d70d36340\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64962d388cc83270c48a728c4d3e6344ee9a82695928e8c4a8c6da1d70d36340","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64962d388cc83270c48a728c4d3e6344ee9a82695928e8c4a8c6da1d70d36340","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64962d388cc83270c48a728c4d3e6344ee9a82695928e8c4a8c6da1d70d36340"} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0"} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f5f21f844ba496cb41a119fe895991a22cc4c32f893e7dc7fdf076bb64e8081","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9"} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f5f21f844ba496cb41a119fe895991a22cc4c32f893e7dc7fdf076bb64e8081","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f5f21f844ba496cb41a119fe895991a22cc4c32f893e7dc7fdf076bb64e8081"} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64962d388cc83270c48a728c4d3e6344ee9a82695928e8c4a8c6da1d70d36340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64962d388cc83270c48a728c4d3e6344ee9a82695928e8c4a8c6da1d70d36340"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64962d388cc83270c48a728c4d3e6344ee9a82695928e8c4a8c6da1d70d36340","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd64017eb59db3250a878d88ccc73780d9e65dd4f6ce6e7ee351ee298e3abda8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0"} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd64017eb59db3250a878d88ccc73780d9e65dd4f6ce6e7ee351ee298e3abda8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd64017eb59db3250a878d88ccc73780d9e65dd4f6ce6e7ee351ee298e3abda8"} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f5f21f844ba496cb41a119fe895991a22cc4c32f893e7dc7fdf076bb64e8081","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f5f21f844ba496cb41a119fe895991a22cc4c32f893e7dc7fdf076bb64e8081"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f5f21f844ba496cb41a119fe895991a22cc4c32f893e7dc7fdf076bb64e8081","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64962d388cc83270c48a728c4d3e6344ee9a82695928e8c4a8c6da1d70d36340","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd64017eb59db3250a878d88ccc73780d9e65dd4f6ce6e7ee351ee298e3abda8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd64017eb59db3250a878d88ccc73780d9e65dd4f6ce6e7ee351ee298e3abda8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9"} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd64017eb59db3250a878d88ccc73780d9e65dd4f6ce6e7ee351ee298e3abda8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"176dbaa11f5a013c12cfb1a02524a3d8a0b8087a54f657badec867c3edfa1019","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"176dbaa11f5a013c12cfb1a02524a3d8a0b8087a54f657badec867c3edfa1019","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c355750ba576ae48be662e88b76bd47babef8246935d887bf1b0b74c45cac759","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f5f21f844ba496cb41a119fe895991a22cc4c32f893e7dc7fdf076bb64e8081"} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c355750ba576ae48be662e88b76bd47babef8246935d887bf1b0b74c45cac759","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f5f21f844ba496cb41a119fe895991a22cc4c32f893e7dc7fdf076bb64e8081","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a71b25e00399935bd9c60371d83293d4a4d9a9e8acec6ef81657e04244b2c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64962d388cc83270c48a728c4d3e6344ee9a82695928e8c4a8c6da1d70d36340"} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a71b25e00399935bd9c60371d83293d4a4d9a9e8acec6ef81657e04244b2c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd64017eb59db3250a878d88ccc73780d9e65dd4f6ce6e7ee351ee298e3abda8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79d5a30a65e31928be1a6e7f7450980b881a99847bd2196beba35f46466da800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79d5a30a65e31928be1a6e7f7450980b881a99847bd2196beba35f46466da800","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"176dbaa11f5a013c12cfb1a02524a3d8a0b8087a54f657badec867c3edfa1019","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c355750ba576ae48be662e88b76bd47babef8246935d887bf1b0b74c45cac759","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a71b25e00399935bd9c60371d83293d4a4d9a9e8acec6ef81657e04244b2c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79d5a30a65e31928be1a6e7f7450980b881a99847bd2196beba35f46466da800","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0"} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79d5a30a65e31928be1a6e7f7450980b881a99847bd2196beba35f46466da800","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"176dbaa11f5a013c12cfb1a02524a3d8a0b8087a54f657badec867c3edfa1019","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"176dbaa11f5a013c12cfb1a02524a3d8a0b8087a54f657badec867c3edfa1019","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c355750ba576ae48be662e88b76bd47babef8246935d887bf1b0b74c45cac759","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a71b25e00399935bd9c60371d83293d4a4d9a9e8acec6ef81657e04244b2c20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/176dbaa11f5a013c12cfb1a02524a3d8a0b8087a54f657badec867c3edfa1019"} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"176dbaa11f5a013c12cfb1a02524a3d8a0b8087a54f657badec867c3edfa1019","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["176dbaa11f5a013c12cfb1a02524a3d8a0b8087a54f657badec867c3edfa1019"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"176dbaa11f5a013c12cfb1a02524a3d8a0b8087a54f657badec867c3edfa1019","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79d5a30a65e31928be1a6e7f7450980b881a99847bd2196beba35f46466da800","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"176dbaa11f5a013c12cfb1a02524a3d8a0b8087a54f657badec867c3edfa1019","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"176dbaa11f5a013c12cfb1a02524a3d8a0b8087a54f657badec867c3edfa1019","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c355750ba576ae48be662e88b76bd47babef8246935d887bf1b0b74c45cac759","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a71b25e00399935bd9c60371d83293d4a4d9a9e8acec6ef81657e04244b2c20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd64017eb59db3250a878d88ccc73780d9e65dd4f6ce6e7ee351ee298e3abda8"} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c355750ba576ae48be662e88b76bd47babef8246935d887bf1b0b74c45cac759"} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79d5a30a65e31928be1a6e7f7450980b881a99847bd2196beba35f46466da800","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c355750ba576ae48be662e88b76bd47babef8246935d887bf1b0b74c45cac759","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c355750ba576ae48be662e88b76bd47babef8246935d887bf1b0b74c45cac759"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a71b25e00399935bd9c60371d83293d4a4d9a9e8acec6ef81657e04244b2c20"} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c355750ba576ae48be662e88b76bd47babef8246935d887bf1b0b74c45cac759","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a71b25e00399935bd9c60371d83293d4a4d9a9e8acec6ef81657e04244b2c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a71b25e00399935bd9c60371d83293d4a4d9a9e8acec6ef81657e04244b2c20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9"} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a71b25e00399935bd9c60371d83293d4a4d9a9e8acec6ef81657e04244b2c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c355750ba576ae48be662e88b76bd47babef8246935d887bf1b0b74c45cac759","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5ae95fdac0f273a8129ef893d5264621c02eea393a192a84a6764ac0f341582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79d5a30a65e31928be1a6e7f7450980b881a99847bd2196beba35f46466da800"} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5ae95fdac0f273a8129ef893d5264621c02eea393a192a84a6764ac0f341582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a71b25e00399935bd9c60371d83293d4a4d9a9e8acec6ef81657e04244b2c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5ae95fdac0f273a8129ef893d5264621c02eea393a192a84a6764ac0f341582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5ae95fdac0f273a8129ef893d5264621c02eea393a192a84a6764ac0f341582","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/176dbaa11f5a013c12cfb1a02524a3d8a0b8087a54f657badec867c3edfa1019"} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5ae95fdac0f273a8129ef893d5264621c02eea393a192a84a6764ac0f341582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79d5a30a65e31928be1a6e7f7450980b881a99847bd2196beba35f46466da800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79d5a30a65e31928be1a6e7f7450980b881a99847bd2196beba35f46466da800"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c355750ba576ae48be662e88b76bd47babef8246935d887bf1b0b74c45cac759"} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79d5a30a65e31928be1a6e7f7450980b881a99847bd2196beba35f46466da800","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79d5a30a65e31928be1a6e7f7450980b881a99847bd2196beba35f46466da800","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5ae95fdac0f273a8129ef893d5264621c02eea393a192a84a6764ac0f341582"} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5ae95fdac0f273a8129ef893d5264621c02eea393a192a84a6764ac0f341582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:43:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5ae95fdac0f273a8129ef893d5264621c02eea393a192a84a6764ac0f341582"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a71b25e00399935bd9c60371d83293d4a4d9a9e8acec6ef81657e04244b2c20"} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5ae95fdac0f273a8129ef893d5264621c02eea393a192a84a6764ac0f341582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5ae95fdac0f273a8129ef893d5264621c02eea393a192a84a6764ac0f341582","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79d5a30a65e31928be1a6e7f7450980b881a99847bd2196beba35f46466da800"} {"level":"info","ts":"2026-07-16T11:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5ae95fdac0f273a8129ef893d5264621c02eea393a192a84a6764ac0f341582"} {"level":"info","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"334841a7-341d-4162-a6fb-b8d0e018dba6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:52354","PortSpecifier":{"PortValue":52354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"334841a7-341d-4162-a6fb-b8d0e018dba6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"334841a7-341d-4162-a6fb-b8d0e018dba6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:52354","PortSpecifier":{"PortValue":52354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202223,"nanos":802400687},"http":{"id":"334841a7-341d-4162-a6fb-b8d0e018dba6","method":"POST","headers":{":authority":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"334841a7-341d-4162-a6fb-b8d0e018dba6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"334841a7-341d-4162-a6fb-b8d0e018dba6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bcfd362-adad-4fee-9fc0-989533af6463","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"]}} {"level":"debug","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"334841a7-341d-4162-a6fb-b8d0e018dba6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bcfd362-adad-4fee-9fc0-989533af6463","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"092ad0e27bbde4ca8b0a6baaa2ece7401c379018e1a796d10591850772675a4b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"334841a7-341d-4162-a6fb-b8d0e018dba6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"334841a7-341d-4162-a6fb-b8d0e018dba6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"334841a7-341d-4162-a6fb-b8d0e018dba6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bfa604/auth-test-model-bfa604\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bfa604/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"334841a7-341d-4162-a6fb-b8d0e018dba6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"334841a7-341d-4162-a6fb-b8d0e018dba6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"334841a7-341d-4162-a6fb-b8d0e018dba6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"334841a7-341d-4162-a6fb-b8d0e018dba6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"334841a7-341d-4162-a6fb-b8d0e018dba6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f553543-4caa-47b5-837c-02f46f1c017a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:51576","PortSpecifier":{"PortValue":51576}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6f553543-4caa-47b5-837c-02f46f1c017a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f553543-4caa-47b5-837c-02f46f1c017a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:51576","PortSpecifier":{"PortValue":51576}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202223,"nanos":864016558},"http":{"id":"6f553543-4caa-47b5-837c-02f46f1c017a","method":"POST","headers":{":authority":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6f553543-4caa-47b5-837c-02f46f1c017a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6f553543-4caa-47b5-837c-02f46f1c017a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bcfd362-adad-4fee-9fc0-989533af6463","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"]}} {"level":"debug","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6f553543-4caa-47b5-837c-02f46f1c017a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bcfd362-adad-4fee-9fc0-989533af6463","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f5f21f844ba496cb41a119fe895991a22cc4c32f893e7dc7fdf076bb64e8081"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f553543-4caa-47b5-837c-02f46f1c017a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f553543-4caa-47b5-837c-02f46f1c017a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f553543-4caa-47b5-837c-02f46f1c017a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f05981/auth-test-model-f05981\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f05981/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6f553543-4caa-47b5-837c-02f46f1c017a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f553543-4caa-47b5-837c-02f46f1c017a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f553543-4caa-47b5-837c-02f46f1c017a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f553543-4caa-47b5-837c-02f46f1c017a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f553543-4caa-47b5-837c-02f46f1c017a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"229e2c39-9305-4947-9a3f-a85ac3c6e082","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:52370","PortSpecifier":{"PortValue":52370}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"229e2c39-9305-4947-9a3f-a85ac3c6e082","method":"GET","path":"/maas-api/v1/api-keys/caa9428b-dc57-4f3b-9326-ee2a4859efcf","host":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"229e2c39-9305-4947-9a3f-a85ac3c6e082","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:52370","PortSpecifier":{"PortValue":52370}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202223,"nanos":921904795},"http":{"id":"229e2c39-9305-4947-9a3f-a85ac3c6e082","method":"GET","headers":{":authority":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/caa9428b-dc57-4f3b-9326-ee2a4859efcf",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"229e2c39-9305-4947-9a3f-a85ac3c6e082","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"229e2c39-9305-4947-9a3f-a85ac3c6e082","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bcfd362-adad-4fee-9fc0-989533af6463","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"]}} {"level":"debug","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"229e2c39-9305-4947-9a3f-a85ac3c6e082","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bcfd362-adad-4fee-9fc0-989533af6463","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"092ad0e27bbde4ca8b0a6baaa2ece7401c379018e1a796d10591850772675a4b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/caa9428b-dc57-4f3b-9326-ee2a4859efcf",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"229e2c39-9305-4947-9a3f-a85ac3c6e082","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"229e2c39-9305-4947-9a3f-a85ac3c6e082","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"229e2c39-9305-4947-9a3f-a85ac3c6e082","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bfa604/auth-test-model-bfa604\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bfa604/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"229e2c39-9305-4947-9a3f-a85ac3c6e082","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"229e2c39-9305-4947-9a3f-a85ac3c6e082","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"229e2c39-9305-4947-9a3f-a85ac3c6e082","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"229e2c39-9305-4947-9a3f-a85ac3c6e082","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"229e2c39-9305-4947-9a3f-a85ac3c6e082","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"245515c8-35fc-4b4b-94a6-2d79d7b18d35","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:51580","PortSpecifier":{"PortValue":51580}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"245515c8-35fc-4b4b-94a6-2d79d7b18d35","method":"GET","path":"/maas-api/v1/api-keys/969d37e2-1f94-48ad-8e51-1ae212af5e98","host":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"245515c8-35fc-4b4b-94a6-2d79d7b18d35","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:51580","PortSpecifier":{"PortValue":51580}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202223,"nanos":959635674},"http":{"id":"245515c8-35fc-4b4b-94a6-2d79d7b18d35","method":"GET","headers":{":authority":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/969d37e2-1f94-48ad-8e51-1ae212af5e98",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"245515c8-35fc-4b4b-94a6-2d79d7b18d35","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"245515c8-35fc-4b4b-94a6-2d79d7b18d35","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bcfd362-adad-4fee-9fc0-989533af6463","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"]}} {"level":"debug","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"245515c8-35fc-4b4b-94a6-2d79d7b18d35","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bcfd362-adad-4fee-9fc0-989533af6463","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f5f21f844ba496cb41a119fe895991a22cc4c32f893e7dc7fdf076bb64e8081"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/969d37e2-1f94-48ad-8e51-1ae212af5e98",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"245515c8-35fc-4b4b-94a6-2d79d7b18d35","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"245515c8-35fc-4b4b-94a6-2d79d7b18d35","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"245515c8-35fc-4b4b-94a6-2d79d7b18d35","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f05981/auth-test-model-f05981\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f05981/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"245515c8-35fc-4b4b-94a6-2d79d7b18d35","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"245515c8-35fc-4b4b-94a6-2d79d7b18d35","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"245515c8-35fc-4b4b-94a6-2d79d7b18d35","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"245515c8-35fc-4b4b-94a6-2d79d7b18d35","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T11:43:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"245515c8-35fc-4b4b-94a6-2d79d7b18d35","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T11:44:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fdfda1db-c03f-4c54-a79d-22505578d91e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:33032","PortSpecifier":{"PortValue":33032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fdfda1db-c03f-4c54-a79d-22505578d91e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T11:44:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fdfda1db-c03f-4c54-a79d-22505578d91e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:33032","PortSpecifier":{"PortValue":33032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202241,"nanos":70401775},"http":{"id":"fdfda1db-c03f-4c54-a79d-22505578d91e","method":"POST","headers":{":authority":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:44:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fdfda1db-c03f-4c54-a79d-22505578d91e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T11:44:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fdfda1db-c03f-4c54-a79d-22505578d91e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bcfd362-adad-4fee-9fc0-989533af6463","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"]}} {"level":"debug","ts":"2026-07-16T11:44:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fdfda1db-c03f-4c54-a79d-22505578d91e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bcfd362-adad-4fee-9fc0-989533af6463","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"092ad0e27bbde4ca8b0a6baaa2ece7401c379018e1a796d10591850772675a4b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:44:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdfda1db-c03f-4c54-a79d-22505578d91e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:44:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdfda1db-c03f-4c54-a79d-22505578d91e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:44:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdfda1db-c03f-4c54-a79d-22505578d91e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bfa604/auth-test-model-bfa604\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bfa604/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:44:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fdfda1db-c03f-4c54-a79d-22505578d91e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T11:44:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdfda1db-c03f-4c54-a79d-22505578d91e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T11:44:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdfda1db-c03f-4c54-a79d-22505578d91e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T11:44:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fdfda1db-c03f-4c54-a79d-22505578d91e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T11:44:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fdfda1db-c03f-4c54-a79d-22505578d91e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T11:44:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6f96e51-0284-4a81-b9e5-62dcc78e171f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:60556","PortSpecifier":{"PortValue":60556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e6f96e51-0284-4a81-b9e5-62dcc78e171f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T11:44:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6f96e51-0284-4a81-b9e5-62dcc78e171f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:60556","PortSpecifier":{"PortValue":60556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202241,"nanos":110419699},"http":{"id":"e6f96e51-0284-4a81-b9e5-62dcc78e171f","method":"POST","headers":{":authority":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:44:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e6f96e51-0284-4a81-b9e5-62dcc78e171f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T11:44:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e6f96e51-0284-4a81-b9e5-62dcc78e171f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bcfd362-adad-4fee-9fc0-989533af6463","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"]}} {"level":"debug","ts":"2026-07-16T11:44:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e6f96e51-0284-4a81-b9e5-62dcc78e171f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bcfd362-adad-4fee-9fc0-989533af6463","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f5f21f844ba496cb41a119fe895991a22cc4c32f893e7dc7fdf076bb64e8081"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:44:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6f96e51-0284-4a81-b9e5-62dcc78e171f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:44:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6f96e51-0284-4a81-b9e5-62dcc78e171f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:44:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6f96e51-0284-4a81-b9e5-62dcc78e171f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f05981/auth-test-model-f05981\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f05981/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:44:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e6f96e51-0284-4a81-b9e5-62dcc78e171f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T11:44:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6f96e51-0284-4a81-b9e5-62dcc78e171f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T11:44:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6f96e51-0284-4a81-b9e5-62dcc78e171f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T11:44:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6f96e51-0284-4a81-b9e5-62dcc78e171f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T11:44:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6f96e51-0284-4a81-b9e5-62dcc78e171f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T11:44:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9141ae6e-4e83-4dbd-a661-0052e832f4c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:33046","PortSpecifier":{"PortValue":33046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9141ae6e-4e83-4dbd-a661-0052e832f4c5","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T11:44:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9141ae6e-4e83-4dbd-a661-0052e832f4c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:33046","PortSpecifier":{"PortValue":33046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202241,"nanos":144720637},"http":{"id":"9141ae6e-4e83-4dbd-a661-0052e832f4c5","method":"GET","headers":{":authority":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:44:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9141ae6e-4e83-4dbd-a661-0052e832f4c5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MXKCYtcZBCaFtKkU_5AkZ5zL0sanGO0qo8ZdOL5XBfGqvP2tS2WIMa0m5UBI"} {"level":"debug","ts":"2026-07-16T11:44:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9141ae6e-4e83-4dbd-a661-0052e832f4c5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bfa604.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MXKCYtcZBCaFtKkU_5AkZ5zL0sanGO0qo8ZdOL5XBfGqvP2tS2WIMa0m5UBI\"}"} {"level":"debug","ts":"2026-07-16T11:44:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9141ae6e-4e83-4dbd-a661-0052e832f4c5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bfa604.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"20e70d42-3c6c-4d3a-bec0-469edbcb33eb","keyName":"e2e-auth-iso-a-d7c036","subscription":"e2e-auth-iso-f5b8f8","tenant":"e2e-shared-a-bfa604","userId":"20e70d42-3c6c-4d3a-bec0-469edbcb33eb","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T11:44:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9141ae6e-4e83-4dbd-a661-0052e832f4c5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:44:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9141ae6e-4e83-4dbd-a661-0052e832f4c5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:44:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9141ae6e-4e83-4dbd-a661-0052e832f4c5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:44:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9141ae6e-4e83-4dbd-a661-0052e832f4c5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bfa604/auth-test-model-bfa604\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bfa604/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:44:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9141ae6e-4e83-4dbd-a661-0052e832f4c5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T11:44:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9141ae6e-4e83-4dbd-a661-0052e832f4c5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-16T11:44:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9141ae6e-4e83-4dbd-a661-0052e832f4c5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-f5b8f8"} {"level":"debug","ts":"2026-07-16T11:44:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9141ae6e-4e83-4dbd-a661-0052e832f4c5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T11:44:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9141ae6e-4e83-4dbd-a661-0052e832f4c5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T11:44:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9141ae6e-4e83-4dbd-a661-0052e832f4c5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T11:44:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d86158f8-90d8-4e33-bda8-80abe9835720","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:37842","PortSpecifier":{"PortValue":37842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d86158f8-90d8-4e33-bda8-80abe9835720","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T11:44:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d86158f8-90d8-4e33-bda8-80abe9835720","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:37842","PortSpecifier":{"PortValue":37842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202256,"nanos":158665966},"http":{"id":"d86158f8-90d8-4e33-bda8-80abe9835720","method":"POST","headers":{":authority":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:44:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d86158f8-90d8-4e33-bda8-80abe9835720","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T11:44:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d86158f8-90d8-4e33-bda8-80abe9835720","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bcfd362-adad-4fee-9fc0-989533af6463","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"]}} {"level":"debug","ts":"2026-07-16T11:44:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d86158f8-90d8-4e33-bda8-80abe9835720","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bcfd362-adad-4fee-9fc0-989533af6463","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"092ad0e27bbde4ca8b0a6baaa2ece7401c379018e1a796d10591850772675a4b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:44:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d86158f8-90d8-4e33-bda8-80abe9835720","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:44:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d86158f8-90d8-4e33-bda8-80abe9835720","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:44:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d86158f8-90d8-4e33-bda8-80abe9835720","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bfa604/auth-test-model-bfa604\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bfa604/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:44:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d86158f8-90d8-4e33-bda8-80abe9835720","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T11:44:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d86158f8-90d8-4e33-bda8-80abe9835720","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T11:44:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d86158f8-90d8-4e33-bda8-80abe9835720","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T11:44:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d86158f8-90d8-4e33-bda8-80abe9835720","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T11:44:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d86158f8-90d8-4e33-bda8-80abe9835720","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T11:44:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b380e15-21a7-475b-abf6-2ed5f0b9709b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:58680","PortSpecifier":{"PortValue":58680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1b380e15-21a7-475b-abf6-2ed5f0b9709b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T11:44:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b380e15-21a7-475b-abf6-2ed5f0b9709b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:58680","PortSpecifier":{"PortValue":58680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202256,"nanos":193642584},"http":{"id":"1b380e15-21a7-475b-abf6-2ed5f0b9709b","method":"POST","headers":{":authority":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:44:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1b380e15-21a7-475b-abf6-2ed5f0b9709b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T11:44:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1b380e15-21a7-475b-abf6-2ed5f0b9709b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bcfd362-adad-4fee-9fc0-989533af6463","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"]}} {"level":"debug","ts":"2026-07-16T11:44:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1b380e15-21a7-475b-abf6-2ed5f0b9709b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bcfd362-adad-4fee-9fc0-989533af6463","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f5f21f844ba496cb41a119fe895991a22cc4c32f893e7dc7fdf076bb64e8081"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:44:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b380e15-21a7-475b-abf6-2ed5f0b9709b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:44:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b380e15-21a7-475b-abf6-2ed5f0b9709b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:44:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b380e15-21a7-475b-abf6-2ed5f0b9709b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f05981/auth-test-model-f05981\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f05981/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:44:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1b380e15-21a7-475b-abf6-2ed5f0b9709b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T11:44:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b380e15-21a7-475b-abf6-2ed5f0b9709b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T11:44:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b380e15-21a7-475b-abf6-2ed5f0b9709b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T11:44:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b380e15-21a7-475b-abf6-2ed5f0b9709b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T11:44:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b380e15-21a7-475b-abf6-2ed5f0b9709b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T11:44:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a56a35fa-3540-4588-af6a-8c3aa0b90c19","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:58688","PortSpecifier":{"PortValue":58688}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a56a35fa-3540-4588-af6a-8c3aa0b90c19","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T11:44:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a56a35fa-3540-4588-af6a-8c3aa0b90c19","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:58688","PortSpecifier":{"PortValue":58688}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202256,"nanos":233344259},"http":{"id":"a56a35fa-3540-4588-af6a-8c3aa0b90c19","method":"GET","headers":{":authority":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:44:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a56a35fa-3540-4588-af6a-8c3aa0b90c19","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-GugvWSeIq2RZnXC4_8a9BxBchzB0ZKAky2d485pabU0M64chPchIcnrvNCfu"} {"level":"debug","ts":"2026-07-16T11:44:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a56a35fa-3540-4588-af6a-8c3aa0b90c19","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f05981.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-GugvWSeIq2RZnXC4_8a9BxBchzB0ZKAky2d485pabU0M64chPchIcnrvNCfu\"}"} {"level":"debug","ts":"2026-07-16T11:44:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a56a35fa-3540-4588-af6a-8c3aa0b90c19","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f05981.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-16T11:44:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a56a35fa-3540-4588-af6a-8c3aa0b90c19","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"4f5f21f844ba496cb41a119fe895991a22cc4c32f893e7dc7fdf076bb64e8081"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:44:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a56a35fa-3540-4588-af6a-8c3aa0b90c19","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:44:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"a56a35fa-3540-4588-af6a-8c3aa0b90c19","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-16T11:44:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a56a35fa-3540-4588-af6a-8c3aa0b90c19","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-16T11:44:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a56a35fa-3540-4588-af6a-8c3aa0b90c19","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"841cb30b-ced0-4876-a8b5-40e14ec40868","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:40818","PortSpecifier":{"PortValue":40818}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"841cb30b-ced0-4876-a8b5-40e14ec40868","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"841cb30b-ced0-4876-a8b5-40e14ec40868","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:40818","PortSpecifier":{"PortValue":40818}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202278,"nanos":407319296},"http":{"id":"841cb30b-ced0-4876-a8b5-40e14ec40868","method":"POST","headers":{":authority":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"841cb30b-ced0-4876-a8b5-40e14ec40868","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"841cb30b-ced0-4876-a8b5-40e14ec40868","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bcfd362-adad-4fee-9fc0-989533af6463","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"]}} {"level":"debug","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"841cb30b-ced0-4876-a8b5-40e14ec40868","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bcfd362-adad-4fee-9fc0-989533af6463","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"092ad0e27bbde4ca8b0a6baaa2ece7401c379018e1a796d10591850772675a4b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"841cb30b-ced0-4876-a8b5-40e14ec40868","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"841cb30b-ced0-4876-a8b5-40e14ec40868","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"841cb30b-ced0-4876-a8b5-40e14ec40868","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bfa604/auth-test-model-bfa604\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bfa604/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"841cb30b-ced0-4876-a8b5-40e14ec40868","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"841cb30b-ced0-4876-a8b5-40e14ec40868","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"841cb30b-ced0-4876-a8b5-40e14ec40868","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"841cb30b-ced0-4876-a8b5-40e14ec40868","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"841cb30b-ced0-4876-a8b5-40e14ec40868","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8225937-9b74-43d7-8be5-a82e6020b6f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:34436","PortSpecifier":{"PortValue":34436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b8225937-9b74-43d7-8be5-a82e6020b6f7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8225937-9b74-43d7-8be5-a82e6020b6f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:34436","PortSpecifier":{"PortValue":34436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202278,"nanos":444150427},"http":{"id":"b8225937-9b74-43d7-8be5-a82e6020b6f7","method":"POST","headers":{":authority":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b8225937-9b74-43d7-8be5-a82e6020b6f7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b8225937-9b74-43d7-8be5-a82e6020b6f7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bcfd362-adad-4fee-9fc0-989533af6463","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"]}} {"level":"debug","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b8225937-9b74-43d7-8be5-a82e6020b6f7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bcfd362-adad-4fee-9fc0-989533af6463","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f5f21f844ba496cb41a119fe895991a22cc4c32f893e7dc7fdf076bb64e8081"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8225937-9b74-43d7-8be5-a82e6020b6f7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8225937-9b74-43d7-8be5-a82e6020b6f7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8225937-9b74-43d7-8be5-a82e6020b6f7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f05981/auth-test-model-f05981\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f05981/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b8225937-9b74-43d7-8be5-a82e6020b6f7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8225937-9b74-43d7-8be5-a82e6020b6f7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8225937-9b74-43d7-8be5-a82e6020b6f7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8225937-9b74-43d7-8be5-a82e6020b6f7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8225937-9b74-43d7-8be5-a82e6020b6f7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"999aaf9a-8098-44a2-9049-5b650f5a9b79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:40824","PortSpecifier":{"PortValue":40824}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"999aaf9a-8098-44a2-9049-5b650f5a9b79","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"999aaf9a-8098-44a2-9049-5b650f5a9b79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:40824","PortSpecifier":{"PortValue":40824}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202278,"nanos":474741781},"http":{"id":"999aaf9a-8098-44a2-9049-5b650f5a9b79","method":"POST","headers":{":authority":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"999aaf9a-8098-44a2-9049-5b650f5a9b79","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"999aaf9a-8098-44a2-9049-5b650f5a9b79","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bcfd362-adad-4fee-9fc0-989533af6463","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"]}} {"level":"debug","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"999aaf9a-8098-44a2-9049-5b650f5a9b79","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bcfd362-adad-4fee-9fc0-989533af6463","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"092ad0e27bbde4ca8b0a6baaa2ece7401c379018e1a796d10591850772675a4b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"999aaf9a-8098-44a2-9049-5b650f5a9b79","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"999aaf9a-8098-44a2-9049-5b650f5a9b79","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"999aaf9a-8098-44a2-9049-5b650f5a9b79","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bfa604/auth-test-model-bfa604\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bfa604/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"999aaf9a-8098-44a2-9049-5b650f5a9b79","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"999aaf9a-8098-44a2-9049-5b650f5a9b79","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"999aaf9a-8098-44a2-9049-5b650f5a9b79","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"999aaf9a-8098-44a2-9049-5b650f5a9b79","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"999aaf9a-8098-44a2-9049-5b650f5a9b79","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"105b634a-3281-41c2-8731-b5cb1a5d3ad2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:34442","PortSpecifier":{"PortValue":34442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"105b634a-3281-41c2-8731-b5cb1a5d3ad2","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"105b634a-3281-41c2-8731-b5cb1a5d3ad2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:34442","PortSpecifier":{"PortValue":34442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202278,"nanos":508167139},"http":{"id":"105b634a-3281-41c2-8731-b5cb1a5d3ad2","method":"POST","headers":{":authority":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"105b634a-3281-41c2-8731-b5cb1a5d3ad2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"105b634a-3281-41c2-8731-b5cb1a5d3ad2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bcfd362-adad-4fee-9fc0-989533af6463","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"]}} {"level":"debug","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"105b634a-3281-41c2-8731-b5cb1a5d3ad2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bcfd362-adad-4fee-9fc0-989533af6463","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f5f21f844ba496cb41a119fe895991a22cc4c32f893e7dc7fdf076bb64e8081"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"105b634a-3281-41c2-8731-b5cb1a5d3ad2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"105b634a-3281-41c2-8731-b5cb1a5d3ad2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"105b634a-3281-41c2-8731-b5cb1a5d3ad2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f05981/auth-test-model-f05981\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f05981/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"105b634a-3281-41c2-8731-b5cb1a5d3ad2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"105b634a-3281-41c2-8731-b5cb1a5d3ad2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"105b634a-3281-41c2-8731-b5cb1a5d3ad2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"105b634a-3281-41c2-8731-b5cb1a5d3ad2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T11:44:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"105b634a-3281-41c2-8731-b5cb1a5d3ad2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98a0fb0b-bbf4-46ea-bce1-e55665431878","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:60434","PortSpecifier":{"PortValue":60434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"98a0fb0b-bbf4-46ea-bce1-e55665431878","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98a0fb0b-bbf4-46ea-bce1-e55665431878","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:60434","PortSpecifier":{"PortValue":60434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202295,"nanos":596159970},"http":{"id":"98a0fb0b-bbf4-46ea-bce1-e55665431878","method":"POST","headers":{":authority":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"98a0fb0b-bbf4-46ea-bce1-e55665431878","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"98a0fb0b-bbf4-46ea-bce1-e55665431878","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bcfd362-adad-4fee-9fc0-989533af6463","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"]}} {"level":"debug","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"98a0fb0b-bbf4-46ea-bce1-e55665431878","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bcfd362-adad-4fee-9fc0-989533af6463","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"092ad0e27bbde4ca8b0a6baaa2ece7401c379018e1a796d10591850772675a4b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98a0fb0b-bbf4-46ea-bce1-e55665431878","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98a0fb0b-bbf4-46ea-bce1-e55665431878","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98a0fb0b-bbf4-46ea-bce1-e55665431878","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bfa604/auth-test-model-bfa604\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bfa604/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"98a0fb0b-bbf4-46ea-bce1-e55665431878","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98a0fb0b-bbf4-46ea-bce1-e55665431878","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98a0fb0b-bbf4-46ea-bce1-e55665431878","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98a0fb0b-bbf4-46ea-bce1-e55665431878","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98a0fb0b-bbf4-46ea-bce1-e55665431878","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1049e4e-1c76-4e53-bad7-4fc4716b7444","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:44680","PortSpecifier":{"PortValue":44680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f1049e4e-1c76-4e53-bad7-4fc4716b7444","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1049e4e-1c76-4e53-bad7-4fc4716b7444","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:44680","PortSpecifier":{"PortValue":44680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202295,"nanos":631358557},"http":{"id":"f1049e4e-1c76-4e53-bad7-4fc4716b7444","method":"POST","headers":{":authority":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f1049e4e-1c76-4e53-bad7-4fc4716b7444","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f1049e4e-1c76-4e53-bad7-4fc4716b7444","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bcfd362-adad-4fee-9fc0-989533af6463","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"]}} {"level":"debug","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f1049e4e-1c76-4e53-bad7-4fc4716b7444","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bcfd362-adad-4fee-9fc0-989533af6463","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f5f21f844ba496cb41a119fe895991a22cc4c32f893e7dc7fdf076bb64e8081"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1049e4e-1c76-4e53-bad7-4fc4716b7444","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1049e4e-1c76-4e53-bad7-4fc4716b7444","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1049e4e-1c76-4e53-bad7-4fc4716b7444","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f05981/auth-test-model-f05981\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f05981/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f1049e4e-1c76-4e53-bad7-4fc4716b7444","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1049e4e-1c76-4e53-bad7-4fc4716b7444","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1049e4e-1c76-4e53-bad7-4fc4716b7444","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1049e4e-1c76-4e53-bad7-4fc4716b7444","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1049e4e-1c76-4e53-bad7-4fc4716b7444","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60335657-8196-4cd8-826a-e9f3b2ca9cc8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:44686","PortSpecifier":{"PortValue":44686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"60335657-8196-4cd8-826a-e9f3b2ca9cc8","method":"GET","path":"/maas-api/v1/api-keys/868b6c83-a7f4-44c0-a67a-b3d2590dc29b","host":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60335657-8196-4cd8-826a-e9f3b2ca9cc8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:44686","PortSpecifier":{"PortValue":44686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202295,"nanos":662016648},"http":{"id":"60335657-8196-4cd8-826a-e9f3b2ca9cc8","method":"GET","headers":{":authority":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/868b6c83-a7f4-44c0-a67a-b3d2590dc29b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"60335657-8196-4cd8-826a-e9f3b2ca9cc8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"60335657-8196-4cd8-826a-e9f3b2ca9cc8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bcfd362-adad-4fee-9fc0-989533af6463","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"]}} {"level":"debug","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"60335657-8196-4cd8-826a-e9f3b2ca9cc8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bcfd362-adad-4fee-9fc0-989533af6463","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f5f21f844ba496cb41a119fe895991a22cc4c32f893e7dc7fdf076bb64e8081"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/868b6c83-a7f4-44c0-a67a-b3d2590dc29b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60335657-8196-4cd8-826a-e9f3b2ca9cc8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60335657-8196-4cd8-826a-e9f3b2ca9cc8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60335657-8196-4cd8-826a-e9f3b2ca9cc8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f05981/auth-test-model-f05981\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f05981/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"60335657-8196-4cd8-826a-e9f3b2ca9cc8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60335657-8196-4cd8-826a-e9f3b2ca9cc8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60335657-8196-4cd8-826a-e9f3b2ca9cc8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60335657-8196-4cd8-826a-e9f3b2ca9cc8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60335657-8196-4cd8-826a-e9f3b2ca9cc8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35033b4d-e260-4ece-abe5-a132a27b4f80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:60438","PortSpecifier":{"PortValue":60438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"35033b4d-e260-4ece-abe5-a132a27b4f80","method":"GET","path":"/maas-api/v1/api-keys/868b6c83-a7f4-44c0-a67a-b3d2590dc29b","host":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35033b4d-e260-4ece-abe5-a132a27b4f80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:60438","PortSpecifier":{"PortValue":60438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202295,"nanos":689400527},"http":{"id":"35033b4d-e260-4ece-abe5-a132a27b4f80","method":"GET","headers":{":authority":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/868b6c83-a7f4-44c0-a67a-b3d2590dc29b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"35033b4d-e260-4ece-abe5-a132a27b4f80","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"35033b4d-e260-4ece-abe5-a132a27b4f80","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bcfd362-adad-4fee-9fc0-989533af6463","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"]}} {"level":"debug","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"35033b4d-e260-4ece-abe5-a132a27b4f80","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bcfd362-adad-4fee-9fc0-989533af6463","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"092ad0e27bbde4ca8b0a6baaa2ece7401c379018e1a796d10591850772675a4b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/868b6c83-a7f4-44c0-a67a-b3d2590dc29b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35033b4d-e260-4ece-abe5-a132a27b4f80","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35033b4d-e260-4ece-abe5-a132a27b4f80","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35033b4d-e260-4ece-abe5-a132a27b4f80","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bfa604/auth-test-model-bfa604\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bfa604/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"35033b4d-e260-4ece-abe5-a132a27b4f80","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35033b4d-e260-4ece-abe5-a132a27b4f80","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35033b4d-e260-4ece-abe5-a132a27b4f80","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35033b4d-e260-4ece-abe5-a132a27b4f80","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T11:44:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35033b4d-e260-4ece-abe5-a132a27b4f80","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T11:45:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1f88f1f-2271-4d22-8d0e-34f2069a5087","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:51124","PortSpecifier":{"PortValue":51124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d1f88f1f-2271-4d22-8d0e-34f2069a5087","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T11:45:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1f88f1f-2271-4d22-8d0e-34f2069a5087","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:51124","PortSpecifier":{"PortValue":51124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202312,"nanos":809958892},"http":{"id":"d1f88f1f-2271-4d22-8d0e-34f2069a5087","method":"POST","headers":{":authority":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:45:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d1f88f1f-2271-4d22-8d0e-34f2069a5087","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T11:45:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d1f88f1f-2271-4d22-8d0e-34f2069a5087","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bcfd362-adad-4fee-9fc0-989533af6463","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"]}} {"level":"debug","ts":"2026-07-16T11:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d1f88f1f-2271-4d22-8d0e-34f2069a5087","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bcfd362-adad-4fee-9fc0-989533af6463","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"092ad0e27bbde4ca8b0a6baaa2ece7401c379018e1a796d10591850772675a4b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1f88f1f-2271-4d22-8d0e-34f2069a5087","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1f88f1f-2271-4d22-8d0e-34f2069a5087","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1f88f1f-2271-4d22-8d0e-34f2069a5087","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bfa604/auth-test-model-bfa604\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bfa604/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:45:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d1f88f1f-2271-4d22-8d0e-34f2069a5087","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T11:45:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1f88f1f-2271-4d22-8d0e-34f2069a5087","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T11:45:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1f88f1f-2271-4d22-8d0e-34f2069a5087","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T11:45:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1f88f1f-2271-4d22-8d0e-34f2069a5087","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T11:45:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1f88f1f-2271-4d22-8d0e-34f2069a5087","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T11:45:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f90cb13-b9cf-4932-b44a-e65310e8fb11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:46782","PortSpecifier":{"PortValue":46782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2f90cb13-b9cf-4932-b44a-e65310e8fb11","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T11:45:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f90cb13-b9cf-4932-b44a-e65310e8fb11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:46782","PortSpecifier":{"PortValue":46782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202312,"nanos":843826563},"http":{"id":"2f90cb13-b9cf-4932-b44a-e65310e8fb11","method":"POST","headers":{":authority":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:45:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2f90cb13-b9cf-4932-b44a-e65310e8fb11","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T11:45:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2f90cb13-b9cf-4932-b44a-e65310e8fb11","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bcfd362-adad-4fee-9fc0-989533af6463","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"]}} {"level":"debug","ts":"2026-07-16T11:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2f90cb13-b9cf-4932-b44a-e65310e8fb11","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bcfd362-adad-4fee-9fc0-989533af6463","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f5f21f844ba496cb41a119fe895991a22cc4c32f893e7dc7fdf076bb64e8081"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f90cb13-b9cf-4932-b44a-e65310e8fb11","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f90cb13-b9cf-4932-b44a-e65310e8fb11","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f90cb13-b9cf-4932-b44a-e65310e8fb11","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f05981/auth-test-model-f05981\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f05981/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:45:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2f90cb13-b9cf-4932-b44a-e65310e8fb11","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T11:45:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f90cb13-b9cf-4932-b44a-e65310e8fb11","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T11:45:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f90cb13-b9cf-4932-b44a-e65310e8fb11","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T11:45:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f90cb13-b9cf-4932-b44a-e65310e8fb11","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T11:45:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f90cb13-b9cf-4932-b44a-e65310e8fb11","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T11:45:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1ad124d-5c7b-4b40-8abe-7298dbd2c32d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:51134","PortSpecifier":{"PortValue":51134}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d1ad124d-5c7b-4b40-8abe-7298dbd2c32d","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T11:45:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1ad124d-5c7b-4b40-8abe-7298dbd2c32d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:51134","PortSpecifier":{"PortValue":51134}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202312,"nanos":876640986},"http":{"id":"d1ad124d-5c7b-4b40-8abe-7298dbd2c32d","method":"POST","headers":{":authority":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:45:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d1ad124d-5c7b-4b40-8abe-7298dbd2c32d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qSeKlhu4sRcAwUBS_SE5XrBwZU1BHi6AiTNcIsnc4ijlGTqrreIVgUvbcEam"} {"level":"debug","ts":"2026-07-16T11:45:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d1ad124d-5c7b-4b40-8abe-7298dbd2c32d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bfa604.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qSeKlhu4sRcAwUBS_SE5XrBwZU1BHi6AiTNcIsnc4ijlGTqrreIVgUvbcEam\"}"} {"level":"debug","ts":"2026-07-16T11:45:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d1ad124d-5c7b-4b40-8abe-7298dbd2c32d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bfa604.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"29777e78-b217-4963-a9c1-17d51cdd3b34","keyName":"e2e-auth-iso-a-aa5b05","subscription":"e2e-auth-iso-a0eb6b","tenant":"e2e-shared-a-bfa604","userId":"29777e78-b217-4963-a9c1-17d51cdd3b34","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T11:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d1ad124d-5c7b-4b40-8abe-7298dbd2c32d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1ad124d-5c7b-4b40-8abe-7298dbd2c32d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1ad124d-5c7b-4b40-8abe-7298dbd2c32d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1ad124d-5c7b-4b40-8abe-7298dbd2c32d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bfa604/auth-test-model-bfa604\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bfa604/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:45:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1ad124d-5c7b-4b40-8abe-7298dbd2c32d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-a0eb6b"} {"level":"debug","ts":"2026-07-16T11:45:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1ad124d-5c7b-4b40-8abe-7298dbd2c32d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T11:45:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1ad124d-5c7b-4b40-8abe-7298dbd2c32d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T11:45:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d1ad124d-5c7b-4b40-8abe-7298dbd2c32d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-16T11:45:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1ad124d-5c7b-4b40-8abe-7298dbd2c32d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T11:45:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1ad124d-5c7b-4b40-8abe-7298dbd2c32d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T11:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/461c6918d0039fcffd036177cdec625134e131477b5467b5262d28b4c7ce23b9"} {"level":"info","ts":"2026-07-16T11:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8f3ba75bd02c474c87d2820a569184a9050ed62c8b82fb38c9646326947b66c"} {"level":"info","ts":"2026-07-16T11:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2c3754156bb5e0d5d0c3ac9594ba3f506c633096fc9311b4c134c7a4614cc62"} {"level":"info","ts":"2026-07-16T11:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/79d5a30a65e31928be1a6e7f7450980b881a99847bd2196beba35f46466da800"} {"level":"info","ts":"2026-07-16T11:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d2c93c45bcd59ef2f5b998ab0bdb41e56aa9853f43d1528f6dc32ee98eb3645"} {"level":"info","ts":"2026-07-16T11:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c355750ba576ae48be662e88b76bd47babef8246935d887bf1b0b74c45cac759"} {"level":"info","ts":"2026-07-16T11:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/176dbaa11f5a013c12cfb1a02524a3d8a0b8087a54f657badec867c3edfa1019"} {"level":"info","ts":"2026-07-16T11:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd64017eb59db3250a878d88ccc73780d9e65dd4f6ce6e7ee351ee298e3abda8"} {"level":"info","ts":"2026-07-16T11:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64962d388cc83270c48a728c4d3e6344ee9a82695928e8c4a8c6da1d70d36340"} {"level":"info","ts":"2026-07-16T11:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb9bbe08a081b52fa3a384ebebd259853dbf0c99704115d06419ad0debd2de25"} {"level":"info","ts":"2026-07-16T11:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7aa8e15e8b4bf48abc534319402de63234fbb321e1de36ba4b711f4d3a0ad357"} {"level":"info","ts":"2026-07-16T11:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5ae95fdac0f273a8129ef893d5264621c02eea393a192a84a6764ac0f341582"} {"level":"info","ts":"2026-07-16T11:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc98910087a356029bd4f81a0454a61e12dbdb9646d2184993f3b68bd936f9db"} {"level":"info","ts":"2026-07-16T11:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4c8c21afe99d61fbdda31277453291f64da2e901486688aaddf2192ed88b50b"} {"level":"info","ts":"2026-07-16T11:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f44dd405adb19268ec9f4e77ddec5e59c6647ebba7703d9abd2f6ed5603bdacd"} {"level":"info","ts":"2026-07-16T11:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e0f1950cdb8c8e717bcd826396d0ba4d5888add649bb025fa726975999ff960"} {"level":"debug","ts":"2026-07-16T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea7ca89ae1e4c9aaef00373a47669bf0952b5ad92a43243df411c3c8fdb78411","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:45:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:45:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea7ca89ae1e4c9aaef00373a47669bf0952b5ad92a43243df411c3c8fdb78411","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea7ca89ae1e4c9aaef00373a47669bf0952b5ad92a43243df411c3c8fdb78411","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea7ca89ae1e4c9aaef00373a47669bf0952b5ad92a43243df411c3c8fdb78411","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea7ca89ae1e4c9aaef00373a47669bf0952b5ad92a43243df411c3c8fdb78411"} {"level":"debug","ts":"2026-07-16T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea7ca89ae1e4c9aaef00373a47669bf0952b5ad92a43243df411c3c8fdb78411","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea7ca89ae1e4c9aaef00373a47669bf0952b5ad92a43243df411c3c8fdb78411"} {"level":"debug","ts":"2026-07-16T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea7ca89ae1e4c9aaef00373a47669bf0952b5ad92a43243df411c3c8fdb78411","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:45:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:45:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea7ca89ae1e4c9aaef00373a47669bf0952b5ad92a43243df411c3c8fdb78411"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea7ca89ae1e4c9aaef00373a47669bf0952b5ad92a43243df411c3c8fdb78411","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea7ca89ae1e4c9aaef00373a47669bf0952b5ad92a43243df411c3c8fdb78411","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:45:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:45:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea7ca89ae1e4c9aaef00373a47669bf0952b5ad92a43243df411c3c8fdb78411","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea7ca89ae1e4c9aaef00373a47669bf0952b5ad92a43243df411c3c8fdb78411","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea7ca89ae1e4c9aaef00373a47669bf0952b5ad92a43243df411c3c8fdb78411","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea7ca89ae1e4c9aaef00373a47669bf0952b5ad92a43243df411c3c8fdb78411"} {"level":"debug","ts":"2026-07-16T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea7ca89ae1e4c9aaef00373a47669bf0952b5ad92a43243df411c3c8fdb78411","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea7ca89ae1e4c9aaef00373a47669bf0952b5ad92a43243df411c3c8fdb78411"} {"level":"debug","ts":"2026-07-16T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea7ca89ae1e4c9aaef00373a47669bf0952b5ad92a43243df411c3c8fdb78411","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:45:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:45:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea7ca89ae1e4c9aaef00373a47669bf0952b5ad92a43243df411c3c8fdb78411"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea7ca89ae1e4c9aaef00373a47669bf0952b5ad92a43243df411c3c8fdb78411","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea7ca89ae1e4c9aaef00373a47669bf0952b5ad92a43243df411c3c8fdb78411","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:45:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:45:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea7ca89ae1e4c9aaef00373a47669bf0952b5ad92a43243df411c3c8fdb78411","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea7ca89ae1e4c9aaef00373a47669bf0952b5ad92a43243df411c3c8fdb78411","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea7ca89ae1e4c9aaef00373a47669bf0952b5ad92a43243df411c3c8fdb78411","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea7ca89ae1e4c9aaef00373a47669bf0952b5ad92a43243df411c3c8fdb78411"} {"level":"debug","ts":"2026-07-16T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea7ca89ae1e4c9aaef00373a47669bf0952b5ad92a43243df411c3c8fdb78411","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea7ca89ae1e4c9aaef00373a47669bf0952b5ad92a43243df411c3c8fdb78411"} {"level":"debug","ts":"2026-07-16T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea7ca89ae1e4c9aaef00373a47669bf0952b5ad92a43243df411c3c8fdb78411","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:45:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:45:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea7ca89ae1e4c9aaef00373a47669bf0952b5ad92a43243df411c3c8fdb78411"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea7ca89ae1e4c9aaef00373a47669bf0952b5ad92a43243df411c3c8fdb78411","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea7ca89ae1e4c9aaef00373a47669bf0952b5ad92a43243df411c3c8fdb78411","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea7ca89ae1e4c9aaef00373a47669bf0952b5ad92a43243df411c3c8fdb78411"} {"level":"debug","ts":"2026-07-16T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67538f5cfe7ee904270f7b3dc9d7a8514abc7ea71ea20ae4e70293584cc921bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:45:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:45:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67538f5cfe7ee904270f7b3dc9d7a8514abc7ea71ea20ae4e70293584cc921bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67538f5cfe7ee904270f7b3dc9d7a8514abc7ea71ea20ae4e70293584cc921bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67538f5cfe7ee904270f7b3dc9d7a8514abc7ea71ea20ae4e70293584cc921bc"} {"level":"debug","ts":"2026-07-16T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67538f5cfe7ee904270f7b3dc9d7a8514abc7ea71ea20ae4e70293584cc921bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67538f5cfe7ee904270f7b3dc9d7a8514abc7ea71ea20ae4e70293584cc921bc"} {"level":"debug","ts":"2026-07-16T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67538f5cfe7ee904270f7b3dc9d7a8514abc7ea71ea20ae4e70293584cc921bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:45:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:45:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67538f5cfe7ee904270f7b3dc9d7a8514abc7ea71ea20ae4e70293584cc921bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67538f5cfe7ee904270f7b3dc9d7a8514abc7ea71ea20ae4e70293584cc921bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67538f5cfe7ee904270f7b3dc9d7a8514abc7ea71ea20ae4e70293584cc921bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67538f5cfe7ee904270f7b3dc9d7a8514abc7ea71ea20ae4e70293584cc921bc"} {"level":"debug","ts":"2026-07-16T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cff3e28c331b02fe52ec72c90d3eca03c23ca3ca613f468cc75d1aad7ade10d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:45:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:45:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cff3e28c331b02fe52ec72c90d3eca03c23ca3ca613f468cc75d1aad7ade10d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cff3e28c331b02fe52ec72c90d3eca03c23ca3ca613f468cc75d1aad7ade10d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cff3e28c331b02fe52ec72c90d3eca03c23ca3ca613f468cc75d1aad7ade10d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cff3e28c331b02fe52ec72c90d3eca03c23ca3ca613f468cc75d1aad7ade10d"} {"level":"debug","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cff3e28c331b02fe52ec72c90d3eca03c23ca3ca613f468cc75d1aad7ade10d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cff3e28c331b02fe52ec72c90d3eca03c23ca3ca613f468cc75d1aad7ade10d"} {"level":"debug","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cff3e28c331b02fe52ec72c90d3eca03c23ca3ca613f468cc75d1aad7ade10d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9cff3e28c331b02fe52ec72c90d3eca03c23ca3ca613f468cc75d1aad7ade10d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cff3e28c331b02fe52ec72c90d3eca03c23ca3ca613f468cc75d1aad7ade10d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cff3e28c331b02fe52ec72c90d3eca03c23ca3ca613f468cc75d1aad7ade10d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cff3e28c331b02fe52ec72c90d3eca03c23ca3ca613f468cc75d1aad7ade10d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f410ef9711c5203fec206a6b3bb49db614dd211ea3969a072433606ff64e7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cff3e28c331b02fe52ec72c90d3eca03c23ca3ca613f468cc75d1aad7ade10d"} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f410ef9711c5203fec206a6b3bb49db614dd211ea3969a072433606ff64e7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cff3e28c331b02fe52ec72c90d3eca03c23ca3ca613f468cc75d1aad7ade10d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9cff3e28c331b02fe52ec72c90d3eca03c23ca3ca613f468cc75d1aad7ade10d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cff3e28c331b02fe52ec72c90d3eca03c23ca3ca613f468cc75d1aad7ade10d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f410ef9711c5203fec206a6b3bb49db614dd211ea3969a072433606ff64e7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f410ef9711c5203fec206a6b3bb49db614dd211ea3969a072433606ff64e7f"} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f410ef9711c5203fec206a6b3bb49db614dd211ea3969a072433606ff64e7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cff3e28c331b02fe52ec72c90d3eca03c23ca3ca613f468cc75d1aad7ade10d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cff3e28c331b02fe52ec72c90d3eca03c23ca3ca613f468cc75d1aad7ade10d"} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cff3e28c331b02fe52ec72c90d3eca03c23ca3ca613f468cc75d1aad7ade10d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f410ef9711c5203fec206a6b3bb49db614dd211ea3969a072433606ff64e7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cff3e28c331b02fe52ec72c90d3eca03c23ca3ca613f468cc75d1aad7ade10d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9cff3e28c331b02fe52ec72c90d3eca03c23ca3ca613f468cc75d1aad7ade10d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cff3e28c331b02fe52ec72c90d3eca03c23ca3ca613f468cc75d1aad7ade10d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cff3e28c331b02fe52ec72c90d3eca03c23ca3ca613f468cc75d1aad7ade10d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9cff3e28c331b02fe52ec72c90d3eca03c23ca3ca613f468cc75d1aad7ade10d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f410ef9711c5203fec206a6b3bb49db614dd211ea3969a072433606ff64e7f"} {"level":"error","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9cff3e28c331b02fe52ec72c90d3eca03c23ca3ca613f468cc75d1aad7ade10d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9cff3e28c331b02fe52ec72c90d3eca03c23ca3ca613f468cc75d1aad7ade10d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f410ef9711c5203fec206a6b3bb49db614dd211ea3969a072433606ff64e7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28f410ef9711c5203fec206a6b3bb49db614dd211ea3969a072433606ff64e7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f410ef9711c5203fec206a6b3bb49db614dd211ea3969a072433606ff64e7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cff3e28c331b02fe52ec72c90d3eca03c23ca3ca613f468cc75d1aad7ade10d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cff3e28c331b02fe52ec72c90d3eca03c23ca3ca613f468cc75d1aad7ade10d"} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cff3e28c331b02fe52ec72c90d3eca03c23ca3ca613f468cc75d1aad7ade10d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"003893cd40764cfac0e44c12a0e73a8b914b3b575fcbabd930e798cc197e7704","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/003893cd40764cfac0e44c12a0e73a8b914b3b575fcbabd930e798cc197e7704"} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"003893cd40764cfac0e44c12a0e73a8b914b3b575fcbabd930e798cc197e7704","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f410ef9711c5203fec206a6b3bb49db614dd211ea3969a072433606ff64e7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f410ef9711c5203fec206a6b3bb49db614dd211ea3969a072433606ff64e7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d05ce7cdd55ebb4f04e917a9ccedb2d8aaa6904aa7ad5cb925629c324d72533f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f410ef9711c5203fec206a6b3bb49db614dd211ea3969a072433606ff64e7f"} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d05ce7cdd55ebb4f04e917a9ccedb2d8aaa6904aa7ad5cb925629c324d72533f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cff3e28c331b02fe52ec72c90d3eca03c23ca3ca613f468cc75d1aad7ade10d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9cff3e28c331b02fe52ec72c90d3eca03c23ca3ca613f468cc75d1aad7ade10d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d05ce7cdd55ebb4f04e917a9ccedb2d8aaa6904aa7ad5cb925629c324d72533f"} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cff3e28c331b02fe52ec72c90d3eca03c23ca3ca613f468cc75d1aad7ade10d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"003893cd40764cfac0e44c12a0e73a8b914b3b575fcbabd930e798cc197e7704","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["003893cd40764cfac0e44c12a0e73a8b914b3b575fcbabd930e798cc197e7704"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"003893cd40764cfac0e44c12a0e73a8b914b3b575fcbabd930e798cc197e7704","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f410ef9711c5203fec206a6b3bb49db614dd211ea3969a072433606ff64e7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28f410ef9711c5203fec206a6b3bb49db614dd211ea3969a072433606ff64e7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cff3e28c331b02fe52ec72c90d3eca03c23ca3ca613f468cc75d1aad7ade10d"} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f410ef9711c5203fec206a6b3bb49db614dd211ea3969a072433606ff64e7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d05ce7cdd55ebb4f04e917a9ccedb2d8aaa6904aa7ad5cb925629c324d72533f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d05ce7cdd55ebb4f04e917a9ccedb2d8aaa6904aa7ad5cb925629c324d72533f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/003893cd40764cfac0e44c12a0e73a8b914b3b575fcbabd930e798cc197e7704"} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d05ce7cdd55ebb4f04e917a9ccedb2d8aaa6904aa7ad5cb925629c324d72533f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cff3e28c331b02fe52ec72c90d3eca03c23ca3ca613f468cc75d1aad7ade10d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"003893cd40764cfac0e44c12a0e73a8b914b3b575fcbabd930e798cc197e7704","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f410ef9711c5203fec206a6b3bb49db614dd211ea3969a072433606ff64e7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f410ef9711c5203fec206a6b3bb49db614dd211ea3969a072433606ff64e7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f4cf216e1416fc008997f583954259a52d4b06b832b5c7d43c8549c58ae6f69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f410ef9711c5203fec206a6b3bb49db614dd211ea3969a072433606ff64e7f"} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f4cf216e1416fc008997f583954259a52d4b06b832b5c7d43c8549c58ae6f69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d05ce7cdd55ebb4f04e917a9ccedb2d8aaa6904aa7ad5cb925629c324d72533f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d05ce7cdd55ebb4f04e917a9ccedb2d8aaa6904aa7ad5cb925629c324d72533f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee136129aee91eaf7078b9d27f76ba60a1b0074ac3a111696269cc5e78772800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d05ce7cdd55ebb4f04e917a9ccedb2d8aaa6904aa7ad5cb925629c324d72533f"} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee136129aee91eaf7078b9d27f76ba60a1b0074ac3a111696269cc5e78772800","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f410ef9711c5203fec206a6b3bb49db614dd211ea3969a072433606ff64e7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28f410ef9711c5203fec206a6b3bb49db614dd211ea3969a072433606ff64e7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cff3e28c331b02fe52ec72c90d3eca03c23ca3ca613f468cc75d1aad7ade10d"} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f410ef9711c5203fec206a6b3bb49db614dd211ea3969a072433606ff64e7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f4cf216e1416fc008997f583954259a52d4b06b832b5c7d43c8549c58ae6f69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f4cf216e1416fc008997f583954259a52d4b06b832b5c7d43c8549c58ae6f69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d05ce7cdd55ebb4f04e917a9ccedb2d8aaa6904aa7ad5cb925629c324d72533f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d05ce7cdd55ebb4f04e917a9ccedb2d8aaa6904aa7ad5cb925629c324d72533f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f4cf216e1416fc008997f583954259a52d4b06b832b5c7d43c8549c58ae6f69"} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d05ce7cdd55ebb4f04e917a9ccedb2d8aaa6904aa7ad5cb925629c324d72533f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee136129aee91eaf7078b9d27f76ba60a1b0074ac3a111696269cc5e78772800","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f410ef9711c5203fec206a6b3bb49db614dd211ea3969a072433606ff64e7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f4cf216e1416fc008997f583954259a52d4b06b832b5c7d43c8549c58ae6f69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f4cf216e1416fc008997f583954259a52d4b06b832b5c7d43c8549c58ae6f69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/003893cd40764cfac0e44c12a0e73a8b914b3b575fcbabd930e798cc197e7704"} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f4cf216e1416fc008997f583954259a52d4b06b832b5c7d43c8549c58ae6f69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d05ce7cdd55ebb4f04e917a9ccedb2d8aaa6904aa7ad5cb925629c324d72533f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee136129aee91eaf7078b9d27f76ba60a1b0074ac3a111696269cc5e78772800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee136129aee91eaf7078b9d27f76ba60a1b0074ac3a111696269cc5e78772800","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f4cf216e1416fc008997f583954259a52d4b06b832b5c7d43c8549c58ae6f69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee136129aee91eaf7078b9d27f76ba60a1b0074ac3a111696269cc5e78772800","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee136129aee91eaf7078b9d27f76ba60a1b0074ac3a111696269cc5e78772800"} {"level":"debug","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee136129aee91eaf7078b9d27f76ba60a1b0074ac3a111696269cc5e78772800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:45:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee136129aee91eaf7078b9d27f76ba60a1b0074ac3a111696269cc5e78772800"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f410ef9711c5203fec206a6b3bb49db614dd211ea3969a072433606ff64e7f"} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee136129aee91eaf7078b9d27f76ba60a1b0074ac3a111696269cc5e78772800","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee136129aee91eaf7078b9d27f76ba60a1b0074ac3a111696269cc5e78772800","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d05ce7cdd55ebb4f04e917a9ccedb2d8aaa6904aa7ad5cb925629c324d72533f"} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f4cf216e1416fc008997f583954259a52d4b06b832b5c7d43c8549c58ae6f69"} {"level":"info","ts":"2026-07-16T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee136129aee91eaf7078b9d27f76ba60a1b0074ac3a111696269cc5e78772800"} {"level":"debug","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32136489ee7f7bb724fd69e5d09f19fdb6610e7a0d270145f21e03844653d6ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:46:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:46:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32136489ee7f7bb724fd69e5d09f19fdb6610e7a0d270145f21e03844653d6ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32136489ee7f7bb724fd69e5d09f19fdb6610e7a0d270145f21e03844653d6ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32136489ee7f7bb724fd69e5d09f19fdb6610e7a0d270145f21e03844653d6ab"} {"level":"debug","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32136489ee7f7bb724fd69e5d09f19fdb6610e7a0d270145f21e03844653d6ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32136489ee7f7bb724fd69e5d09f19fdb6610e7a0d270145f21e03844653d6ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32136489ee7f7bb724fd69e5d09f19fdb6610e7a0d270145f21e03844653d6ab"} {"level":"debug","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32136489ee7f7bb724fd69e5d09f19fdb6610e7a0d270145f21e03844653d6ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:46:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:46:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32136489ee7f7bb724fd69e5d09f19fdb6610e7a0d270145f21e03844653d6ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32136489ee7f7bb724fd69e5d09f19fdb6610e7a0d270145f21e03844653d6ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32136489ee7f7bb724fd69e5d09f19fdb6610e7a0d270145f21e03844653d6ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32136489ee7f7bb724fd69e5d09f19fdb6610e7a0d270145f21e03844653d6ab"} {"level":"debug","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3aeeb5886c30cbf3bf9030085324d1431744e5189b1c30a0d89de55936259bd9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:46:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:46:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3aeeb5886c30cbf3bf9030085324d1431744e5189b1c30a0d89de55936259bd9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3aeeb5886c30cbf3bf9030085324d1431744e5189b1c30a0d89de55936259bd9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:46:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:46:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3aeeb5886c30cbf3bf9030085324d1431744e5189b1c30a0d89de55936259bd9"} {"level":"info","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3aeeb5886c30cbf3bf9030085324d1431744e5189b1c30a0d89de55936259bd9"} {"level":"info","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3aeeb5886c30cbf3bf9030085324d1431744e5189b1c30a0d89de55936259bd9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3aeeb5886c30cbf3bf9030085324d1431744e5189b1c30a0d89de55936259bd9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:46:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:46:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3aeeb5886c30cbf3bf9030085324d1431744e5189b1c30a0d89de55936259bd9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3aeeb5886c30cbf3bf9030085324d1431744e5189b1c30a0d89de55936259bd9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3aeeb5886c30cbf3bf9030085324d1431744e5189b1c30a0d89de55936259bd9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3aeeb5886c30cbf3bf9030085324d1431744e5189b1c30a0d89de55936259bd9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3aeeb5886c30cbf3bf9030085324d1431744e5189b1c30a0d89de55936259bd9"} {"level":"debug","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3aeeb5886c30cbf3bf9030085324d1431744e5189b1c30a0d89de55936259bd9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:46:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:46:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3aeeb5886c30cbf3bf9030085324d1431744e5189b1c30a0d89de55936259bd9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3aeeb5886c30cbf3bf9030085324d1431744e5189b1c30a0d89de55936259bd9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67bb02f7f42fc8f9ffce6a034bd5cf8640977ad209e4947435f115351cc665ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:46:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:46:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67bb02f7f42fc8f9ffce6a034bd5cf8640977ad209e4947435f115351cc665ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3aeeb5886c30cbf3bf9030085324d1431744e5189b1c30a0d89de55936259bd9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67bb02f7f42fc8f9ffce6a034bd5cf8640977ad209e4947435f115351cc665ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:46:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:46:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67bb02f7f42fc8f9ffce6a034bd5cf8640977ad209e4947435f115351cc665ec"} {"level":"info","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67bb02f7f42fc8f9ffce6a034bd5cf8640977ad209e4947435f115351cc665ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67bb02f7f42fc8f9ffce6a034bd5cf8640977ad209e4947435f115351cc665ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:46:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:46:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67bb02f7f42fc8f9ffce6a034bd5cf8640977ad209e4947435f115351cc665ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"67bb02f7f42fc8f9ffce6a034bd5cf8640977ad209e4947435f115351cc665ec","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"67bb02f7f42fc8f9ffce6a034bd5cf8640977ad209e4947435f115351cc665ec\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67bb02f7f42fc8f9ffce6a034bd5cf8640977ad209e4947435f115351cc665ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:46:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:46:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67bb02f7f42fc8f9ffce6a034bd5cf8640977ad209e4947435f115351cc665ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3aeeb5886c30cbf3bf9030085324d1431744e5189b1c30a0d89de55936259bd9"} {"level":"info","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67bb02f7f42fc8f9ffce6a034bd5cf8640977ad209e4947435f115351cc665ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67bb02f7f42fc8f9ffce6a034bd5cf8640977ad209e4947435f115351cc665ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67bb02f7f42fc8f9ffce6a034bd5cf8640977ad209e4947435f115351cc665ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:46:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:46:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67bb02f7f42fc8f9ffce6a034bd5cf8640977ad209e4947435f115351cc665ec"} {"level":"info","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67bb02f7f42fc8f9ffce6a034bd5cf8640977ad209e4947435f115351cc665ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67bb02f7f42fc8f9ffce6a034bd5cf8640977ad209e4947435f115351cc665ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:46:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:46:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"67bb02f7f42fc8f9ffce6a034bd5cf8640977ad209e4947435f115351cc665ec","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"67bb02f7f42fc8f9ffce6a034bd5cf8640977ad209e4947435f115351cc665ec\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67bb02f7f42fc8f9ffce6a034bd5cf8640977ad209e4947435f115351cc665ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67bb02f7f42fc8f9ffce6a034bd5cf8640977ad209e4947435f115351cc665ec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67bb02f7f42fc8f9ffce6a034bd5cf8640977ad209e4947435f115351cc665ec"} {"level":"debug","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c20841b1eb41885a16baca0987d9997839ed0c8e8b6da4da8e2b6ec16153bb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:46:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:46:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c20841b1eb41885a16baca0987d9997839ed0c8e8b6da4da8e2b6ec16153bb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c20841b1eb41885a16baca0987d9997839ed0c8e8b6da4da8e2b6ec16153bb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c20841b1eb41885a16baca0987d9997839ed0c8e8b6da4da8e2b6ec16153bb5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67bb02f7f42fc8f9ffce6a034bd5cf8640977ad209e4947435f115351cc665ec"} {"level":"debug","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c20841b1eb41885a16baca0987d9997839ed0c8e8b6da4da8e2b6ec16153bb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:46:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:46:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c20841b1eb41885a16baca0987d9997839ed0c8e8b6da4da8e2b6ec16153bb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67bb02f7f42fc8f9ffce6a034bd5cf8640977ad209e4947435f115351cc665ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:46:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:46:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67bb02f7f42fc8f9ffce6a034bd5cf8640977ad209e4947435f115351cc665ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67bb02f7f42fc8f9ffce6a034bd5cf8640977ad209e4947435f115351cc665ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c20841b1eb41885a16baca0987d9997839ed0c8e8b6da4da8e2b6ec16153bb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67bb02f7f42fc8f9ffce6a034bd5cf8640977ad209e4947435f115351cc665ec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c20841b1eb41885a16baca0987d9997839ed0c8e8b6da4da8e2b6ec16153bb5"} {"level":"debug","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c20841b1eb41885a16baca0987d9997839ed0c8e8b6da4da8e2b6ec16153bb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:46:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:46:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c20841b1eb41885a16baca0987d9997839ed0c8e8b6da4da8e2b6ec16153bb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67bb02f7f42fc8f9ffce6a034bd5cf8640977ad209e4947435f115351cc665ec"} {"level":"info","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c20841b1eb41885a16baca0987d9997839ed0c8e8b6da4da8e2b6ec16153bb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c20841b1eb41885a16baca0987d9997839ed0c8e8b6da4da8e2b6ec16153bb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:46:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:46:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c20841b1eb41885a16baca0987d9997839ed0c8e8b6da4da8e2b6ec16153bb5"} {"level":"info","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c20841b1eb41885a16baca0987d9997839ed0c8e8b6da4da8e2b6ec16153bb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c20841b1eb41885a16baca0987d9997839ed0c8e8b6da4da8e2b6ec16153bb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c20841b1eb41885a16baca0987d9997839ed0c8e8b6da4da8e2b6ec16153bb5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c20841b1eb41885a16baca0987d9997839ed0c8e8b6da4da8e2b6ec16153bb5"} {"level":"debug","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c20841b1eb41885a16baca0987d9997839ed0c8e8b6da4da8e2b6ec16153bb5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c20841b1eb41885a16baca0987d9997839ed0c8e8b6da4da8e2b6ec16153bb5"} {"level":"debug","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1991a6c0e4f83b171f86f22c0ccdb6cc306ff7a76f21bc170836eb1e29ea7f6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:46:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:46:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1991a6c0e4f83b171f86f22c0ccdb6cc306ff7a76f21bc170836eb1e29ea7f6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c20841b1eb41885a16baca0987d9997839ed0c8e8b6da4da8e2b6ec16153bb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:46:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:46:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c20841b1eb41885a16baca0987d9997839ed0c8e8b6da4da8e2b6ec16153bb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1991a6c0e4f83b171f86f22c0ccdb6cc306ff7a76f21bc170836eb1e29ea7f6d"} {"level":"info","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c20841b1eb41885a16baca0987d9997839ed0c8e8b6da4da8e2b6ec16153bb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1991a6c0e4f83b171f86f22c0ccdb6cc306ff7a76f21bc170836eb1e29ea7f6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c20841b1eb41885a16baca0987d9997839ed0c8e8b6da4da8e2b6ec16153bb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1991a6c0e4f83b171f86f22c0ccdb6cc306ff7a76f21bc170836eb1e29ea7f6d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1991a6c0e4f83b171f86f22c0ccdb6cc306ff7a76f21bc170836eb1e29ea7f6d"} {"level":"debug","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1991a6c0e4f83b171f86f22c0ccdb6cc306ff7a76f21bc170836eb1e29ea7f6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:46:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:46:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1991a6c0e4f83b171f86f22c0ccdb6cc306ff7a76f21bc170836eb1e29ea7f6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c20841b1eb41885a16baca0987d9997839ed0c8e8b6da4da8e2b6ec16153bb5"} {"level":"info","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1991a6c0e4f83b171f86f22c0ccdb6cc306ff7a76f21bc170836eb1e29ea7f6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1991a6c0e4f83b171f86f22c0ccdb6cc306ff7a76f21bc170836eb1e29ea7f6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:46:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:46:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1991a6c0e4f83b171f86f22c0ccdb6cc306ff7a76f21bc170836eb1e29ea7f6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1991a6c0e4f83b171f86f22c0ccdb6cc306ff7a76f21bc170836eb1e29ea7f6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1991a6c0e4f83b171f86f22c0ccdb6cc306ff7a76f21bc170836eb1e29ea7f6d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1991a6c0e4f83b171f86f22c0ccdb6cc306ff7a76f21bc170836eb1e29ea7f6d"} {"level":"debug","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd7ec8a3b6479bb28c2ad9bd0bee390e21b8686bed3969df0c15abb71db3244a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:46:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:46:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1991a6c0e4f83b171f86f22c0ccdb6cc306ff7a76f21bc170836eb1e29ea7f6d"} {"level":"info","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd7ec8a3b6479bb28c2ad9bd0bee390e21b8686bed3969df0c15abb71db3244a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"234ee405212714c352b6a1c4f3619251e980f08f552dd1a2409c3c23735492c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:46:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:46:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"234ee405212714c352b6a1c4f3619251e980f08f552dd1a2409c3c23735492c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1991a6c0e4f83b171f86f22c0ccdb6cc306ff7a76f21bc170836eb1e29ea7f6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:46:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:46:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1991a6c0e4f83b171f86f22c0ccdb6cc306ff7a76f21bc170836eb1e29ea7f6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd7ec8a3b6479bb28c2ad9bd0bee390e21b8686bed3969df0c15abb71db3244a"} {"level":"info","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1991a6c0e4f83b171f86f22c0ccdb6cc306ff7a76f21bc170836eb1e29ea7f6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd7ec8a3b6479bb28c2ad9bd0bee390e21b8686bed3969df0c15abb71db3244a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:46:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:46:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd7ec8a3b6479bb28c2ad9bd0bee390e21b8686bed3969df0c15abb71db3244a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/234ee405212714c352b6a1c4f3619251e980f08f552dd1a2409c3c23735492c3"} {"level":"info","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd7ec8a3b6479bb28c2ad9bd0bee390e21b8686bed3969df0c15abb71db3244a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"234ee405212714c352b6a1c4f3619251e980f08f552dd1a2409c3c23735492c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:46:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:46:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["234ee405212714c352b6a1c4f3619251e980f08f552dd1a2409c3c23735492c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"234ee405212714c352b6a1c4f3619251e980f08f552dd1a2409c3c23735492c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1991a6c0e4f83b171f86f22c0ccdb6cc306ff7a76f21bc170836eb1e29ea7f6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd7ec8a3b6479bb28c2ad9bd0bee390e21b8686bed3969df0c15abb71db3244a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:46:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:46:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd7ec8a3b6479bb28c2ad9bd0bee390e21b8686bed3969df0c15abb71db3244a"} {"level":"info","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd7ec8a3b6479bb28c2ad9bd0bee390e21b8686bed3969df0c15abb71db3244a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"234ee405212714c352b6a1c4f3619251e980f08f552dd1a2409c3c23735492c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd7ec8a3b6479bb28c2ad9bd0bee390e21b8686bed3969df0c15abb71db3244a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:46:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:46:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd7ec8a3b6479bb28c2ad9bd0bee390e21b8686bed3969df0c15abb71db3244a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1991a6c0e4f83b171f86f22c0ccdb6cc306ff7a76f21bc170836eb1e29ea7f6d"} {"level":"info","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd7ec8a3b6479bb28c2ad9bd0bee390e21b8686bed3969df0c15abb71db3244a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:46:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:46:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd7ec8a3b6479bb28c2ad9bd0bee390e21b8686bed3969df0c15abb71db3244a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/234ee405212714c352b6a1c4f3619251e980f08f552dd1a2409c3c23735492c3"} {"level":"debug","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd7ec8a3b6479bb28c2ad9bd0bee390e21b8686bed3969df0c15abb71db3244a"} {"level":"debug","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:46:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:46:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff"} {"level":"info","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff"} {"level":"debug","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:46:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:46:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:46:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:46:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff"} {"level":"debug","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff"} {"level":"debug","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:46:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:46:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:46:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:46:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff"} {"level":"debug","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff"} {"level":"debug","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:46:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:46:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:46:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:46:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff"} {"level":"debug","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff"} {"level":"debug","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:46:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:46:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:46:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:46:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff"} {"level":"debug","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff"} {"level":"debug","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:46:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:46:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff"} {"level":"debug","ts":"2026-07-16T11:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67538f5cfe7ee904270f7b3dc9d7a8514abc7ea71ea20ae4e70293584cc921bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67538f5cfe7ee904270f7b3dc9d7a8514abc7ea71ea20ae4e70293584cc921bc"} {"level":"debug","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3aeeb5886c30cbf3bf9030085324d1431744e5189b1c30a0d89de55936259bd9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:46:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:46:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3aeeb5886c30cbf3bf9030085324d1431744e5189b1c30a0d89de55936259bd9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3aeeb5886c30cbf3bf9030085324d1431744e5189b1c30a0d89de55936259bd9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3aeeb5886c30cbf3bf9030085324d1431744e5189b1c30a0d89de55936259bd9"} {"level":"debug","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3aeeb5886c30cbf3bf9030085324d1431744e5189b1c30a0d89de55936259bd9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3aeeb5886c30cbf3bf9030085324d1431744e5189b1c30a0d89de55936259bd9"} {"level":"debug","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3aeeb5886c30cbf3bf9030085324d1431744e5189b1c30a0d89de55936259bd9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:46:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:46:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3aeeb5886c30cbf3bf9030085324d1431744e5189b1c30a0d89de55936259bd9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3aeeb5886c30cbf3bf9030085324d1431744e5189b1c30a0d89de55936259bd9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3aeeb5886c30cbf3bf9030085324d1431744e5189b1c30a0d89de55936259bd9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:46:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:46:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3aeeb5886c30cbf3bf9030085324d1431744e5189b1c30a0d89de55936259bd9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3aeeb5886c30cbf3bf9030085324d1431744e5189b1c30a0d89de55936259bd9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3aeeb5886c30cbf3bf9030085324d1431744e5189b1c30a0d89de55936259bd9"} {"level":"debug","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3aeeb5886c30cbf3bf9030085324d1431744e5189b1c30a0d89de55936259bd9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3aeeb5886c30cbf3bf9030085324d1431744e5189b1c30a0d89de55936259bd9"} {"level":"debug","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3aeeb5886c30cbf3bf9030085324d1431744e5189b1c30a0d89de55936259bd9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:46:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:46:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3aeeb5886c30cbf3bf9030085324d1431744e5189b1c30a0d89de55936259bd9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3aeeb5886c30cbf3bf9030085324d1431744e5189b1c30a0d89de55936259bd9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3aeeb5886c30cbf3bf9030085324d1431744e5189b1c30a0d89de55936259bd9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3aeeb5886c30cbf3bf9030085324d1431744e5189b1c30a0d89de55936259bd9"} {"level":"debug","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:46:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:46:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff"} {"level":"debug","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff"} {"level":"debug","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:46:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:46:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:46:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:46:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff"} {"level":"debug","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff"} {"level":"debug","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:46:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:46:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff"} {"level":"debug","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"234ee405212714c352b6a1c4f3619251e980f08f552dd1a2409c3c23735492c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:46:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:46:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"234ee405212714c352b6a1c4f3619251e980f08f552dd1a2409c3c23735492c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"234ee405212714c352b6a1c4f3619251e980f08f552dd1a2409c3c23735492c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"234ee405212714c352b6a1c4f3619251e980f08f552dd1a2409c3c23735492c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/234ee405212714c352b6a1c4f3619251e980f08f552dd1a2409c3c23735492c3"} {"level":"debug","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"234ee405212714c352b6a1c4f3619251e980f08f552dd1a2409c3c23735492c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/234ee405212714c352b6a1c4f3619251e980f08f552dd1a2409c3c23735492c3"} {"level":"debug","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"234ee405212714c352b6a1c4f3619251e980f08f552dd1a2409c3c23735492c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:46:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:46:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["234ee405212714c352b6a1c4f3619251e980f08f552dd1a2409c3c23735492c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"234ee405212714c352b6a1c4f3619251e980f08f552dd1a2409c3c23735492c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"234ee405212714c352b6a1c4f3619251e980f08f552dd1a2409c3c23735492c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:46:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:46:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"234ee405212714c352b6a1c4f3619251e980f08f552dd1a2409c3c23735492c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33d598ceb2239933f0478cd208772372cd480cc158ade89d05b67953f6c3e0e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"234ee405212714c352b6a1c4f3619251e980f08f552dd1a2409c3c23735492c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"234ee405212714c352b6a1c4f3619251e980f08f552dd1a2409c3c23735492c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/234ee405212714c352b6a1c4f3619251e980f08f552dd1a2409c3c23735492c3"} {"level":"debug","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"234ee405212714c352b6a1c4f3619251e980f08f552dd1a2409c3c23735492c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:46:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:46:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["234ee405212714c352b6a1c4f3619251e980f08f552dd1a2409c3c23735492c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33d598ceb2239933f0478cd208772372cd480cc158ade89d05b67953f6c3e0e7"} {"level":"info","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"234ee405212714c352b6a1c4f3619251e980f08f552dd1a2409c3c23735492c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"234ee405212714c352b6a1c4f3619251e980f08f552dd1a2409c3c23735492c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:46:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:46:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"234ee405212714c352b6a1c4f3619251e980f08f552dd1a2409c3c23735492c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"234ee405212714c352b6a1c4f3619251e980f08f552dd1a2409c3c23735492c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"234ee405212714c352b6a1c4f3619251e980f08f552dd1a2409c3c23735492c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cff3e28c331b02fe52ec72c90d3eca03c23ca3ca613f468cc75d1aad7ade10d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"234ee405212714c352b6a1c4f3619251e980f08f552dd1a2409c3c23735492c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/234ee405212714c352b6a1c4f3619251e980f08f552dd1a2409c3c23735492c3"} {"level":"info","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cff3e28c331b02fe52ec72c90d3eca03c23ca3ca613f468cc75d1aad7ade10d"} {"level":"debug","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"234ee405212714c352b6a1c4f3619251e980f08f552dd1a2409c3c23735492c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/234ee405212714c352b6a1c4f3619251e980f08f552dd1a2409c3c23735492c3"} {"level":"debug","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"092ad0e27bbde4ca8b0a6baaa2ece7401c379018e1a796d10591850772675a4b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9"} {"level":"debug","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"234ee405212714c352b6a1c4f3619251e980f08f552dd1a2409c3c23735492c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:46:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:46:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["234ee405212714c352b6a1c4f3619251e980f08f552dd1a2409c3c23735492c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"234ee405212714c352b6a1c4f3619251e980f08f552dd1a2409c3c23735492c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"234ee405212714c352b6a1c4f3619251e980f08f552dd1a2409c3c23735492c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092ad0e27bbde4ca8b0a6baaa2ece7401c379018e1a796d10591850772675a4b"} {"level":"info","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/234ee405212714c352b6a1c4f3619251e980f08f552dd1a2409c3c23735492c3"} {"level":"debug","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c20841b1eb41885a16baca0987d9997839ed0c8e8b6da4da8e2b6ec16153bb5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c20841b1eb41885a16baca0987d9997839ed0c8e8b6da4da8e2b6ec16153bb5"} {"level":"debug","ts":"2026-07-16T11:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:46:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:46:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb"} {"level":"debug","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb"} {"level":"debug","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:46:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:46:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:46:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:46:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f5f21f844ba496cb41a119fe895991a22cc4c32f893e7dc7fdf076bb64e8081","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb"} {"level":"debug","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd7ec8a3b6479bb28c2ad9bd0bee390e21b8686bed3969df0c15abb71db3244a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:46:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:46:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f5f21f844ba496cb41a119fe895991a22cc4c32f893e7dc7fdf076bb64e8081"} {"level":"info","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:46:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:46:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb"} {"level":"info","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:46:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:46:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:46:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:46:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd7ec8a3b6479bb28c2ad9bd0bee390e21b8686bed3969df0c15abb71db3244a"} {"level":"error","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:46:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:46:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:46:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:46:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb"} {"level":"error","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb"} {"level":"debug","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:46:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:46:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea7ca89ae1e4c9aaef00373a47669bf0952b5ad92a43243df411c3c8fdb78411","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:46:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:46:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea7ca89ae1e4c9aaef00373a47669bf0952b5ad92a43243df411c3c8fdb78411","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a71b25e00399935bd9c60371d83293d4a4d9a9e8acec6ef81657e04244b2c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea7ca89ae1e4c9aaef00373a47669bf0952b5ad92a43243df411c3c8fdb78411","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea7ca89ae1e4c9aaef00373a47669bf0952b5ad92a43243df411c3c8fdb78411"} {"level":"debug","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea7ca89ae1e4c9aaef00373a47669bf0952b5ad92a43243df411c3c8fdb78411","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:46:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:46:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea7ca89ae1e4c9aaef00373a47669bf0952b5ad92a43243df411c3c8fdb78411"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea7ca89ae1e4c9aaef00373a47669bf0952b5ad92a43243df411c3c8fdb78411","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea7ca89ae1e4c9aaef00373a47669bf0952b5ad92a43243df411c3c8fdb78411","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb"} {"level":"debug","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a71b25e00399935bd9c60371d83293d4a4d9a9e8acec6ef81657e04244b2c20"} {"level":"info","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea7ca89ae1e4c9aaef00373a47669bf0952b5ad92a43243df411c3c8fdb78411"} {"level":"debug","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1991a6c0e4f83b171f86f22c0ccdb6cc306ff7a76f21bc170836eb1e29ea7f6d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20"} {"level":"debug","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f410ef9711c5203fec206a6b3bb49db614dd211ea3969a072433606ff64e7f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0"} {"level":"debug","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"003893cd40764cfac0e44c12a0e73a8b914b3b575fcbabd930e798cc197e7704","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1991a6c0e4f83b171f86f22c0ccdb6cc306ff7a76f21bc170836eb1e29ea7f6d"} {"level":"debug","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee136129aee91eaf7078b9d27f76ba60a1b0074ac3a111696269cc5e78772800","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d05ce7cdd55ebb4f04e917a9ccedb2d8aaa6904aa7ad5cb925629c324d72533f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f410ef9711c5203fec206a6b3bb49db614dd211ea3969a072433606ff64e7f"} {"level":"info","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/003893cd40764cfac0e44c12a0e73a8b914b3b575fcbabd930e798cc197e7704"} {"level":"debug","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67bb02f7f42fc8f9ffce6a034bd5cf8640977ad209e4947435f115351cc665ec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee136129aee91eaf7078b9d27f76ba60a1b0074ac3a111696269cc5e78772800"} {"level":"debug","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32136489ee7f7bb724fd69e5d09f19fdb6610e7a0d270145f21e03844653d6ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d05ce7cdd55ebb4f04e917a9ccedb2d8aaa6904aa7ad5cb925629c324d72533f"} {"level":"debug","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f4cf216e1416fc008997f583954259a52d4b06b832b5c7d43c8549c58ae6f69","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67bb02f7f42fc8f9ffce6a034bd5cf8640977ad209e4947435f115351cc665ec"} {"level":"info","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32136489ee7f7bb724fd69e5d09f19fdb6610e7a0d270145f21e03844653d6ab"} {"level":"info","ts":"2026-07-16T11:46:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f4cf216e1416fc008997f583954259a52d4b06b832b5c7d43c8549c58ae6f69"} {"level":"info","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef7eacae-3ab1-4b6d-a849-b04003e67acb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:47504","PortSpecifier":{"PortValue":47504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ef7eacae-3ab1-4b6d-a849-b04003e67acb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef7eacae-3ab1-4b6d-a849-b04003e67acb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:47504","PortSpecifier":{"PortValue":47504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202383,"nanos":569896824},"http":{"id":"ef7eacae-3ab1-4b6d-a849-b04003e67acb","method":"POST","headers":{":authority":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ef7eacae-3ab1-4b6d-a849-b04003e67acb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ef7eacae-3ab1-4b6d-a849-b04003e67acb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bcfd362-adad-4fee-9fc0-989533af6463","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"]}} {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ef7eacae-3ab1-4b6d-a849-b04003e67acb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bcfd362-adad-4fee-9fc0-989533af6463","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"092ad0e27bbde4ca8b0a6baaa2ece7401c379018e1a796d10591850772675a4b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef7eacae-3ab1-4b6d-a849-b04003e67acb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef7eacae-3ab1-4b6d-a849-b04003e67acb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef7eacae-3ab1-4b6d-a849-b04003e67acb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bfa604/sub-test-model-bfa604\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bfa604/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ef7eacae-3ab1-4b6d-a849-b04003e67acb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef7eacae-3ab1-4b6d-a849-b04003e67acb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef7eacae-3ab1-4b6d-a849-b04003e67acb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef7eacae-3ab1-4b6d-a849-b04003e67acb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef7eacae-3ab1-4b6d-a849-b04003e67acb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87822fc4-d877-42bb-8e85-adc74fa291db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:57236","PortSpecifier":{"PortValue":57236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87822fc4-d877-42bb-8e85-adc74fa291db","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87822fc4-d877-42bb-8e85-adc74fa291db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:57236","PortSpecifier":{"PortValue":57236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202383,"nanos":608764594},"http":{"id":"87822fc4-d877-42bb-8e85-adc74fa291db","method":"POST","headers":{":authority":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"87822fc4-d877-42bb-8e85-adc74fa291db","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87822fc4-d877-42bb-8e85-adc74fa291db","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bcfd362-adad-4fee-9fc0-989533af6463","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"]}} {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87822fc4-d877-42bb-8e85-adc74fa291db","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bcfd362-adad-4fee-9fc0-989533af6463","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f5f21f844ba496cb41a119fe895991a22cc4c32f893e7dc7fdf076bb64e8081"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87822fc4-d877-42bb-8e85-adc74fa291db","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87822fc4-d877-42bb-8e85-adc74fa291db","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87822fc4-d877-42bb-8e85-adc74fa291db","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f05981/sub-test-model-f05981\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f05981/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"87822fc4-d877-42bb-8e85-adc74fa291db","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87822fc4-d877-42bb-8e85-adc74fa291db","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87822fc4-d877-42bb-8e85-adc74fa291db","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87822fc4-d877-42bb-8e85-adc74fa291db","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87822fc4-d877-42bb-8e85-adc74fa291db","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"506150e4-e6a1-4dae-8b81-425beb58cce3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:47516","PortSpecifier":{"PortValue":47516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"506150e4-e6a1-4dae-8b81-425beb58cce3","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"506150e4-e6a1-4dae-8b81-425beb58cce3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:47516","PortSpecifier":{"PortValue":47516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202383,"nanos":646267879},"http":{"id":"506150e4-e6a1-4dae-8b81-425beb58cce3","method":"GET","headers":{":authority":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"506150e4-e6a1-4dae-8b81-425beb58cce3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1739CXAHoYSNj8JdO_sBmdxUipxMfFYkyaSqOZDVV8jkv2rRa5rZDay9e4DFC"} {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"506150e4-e6a1-4dae-8b81-425beb58cce3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bfa604.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1739CXAHoYSNj8JdO_sBmdxUipxMfFYkyaSqOZDVV8jkv2rRa5rZDay9e4DFC\"}"} {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"506150e4-e6a1-4dae-8b81-425beb58cce3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bfa604.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"02aba4cc-c1d5-4a46-a57c-b759213f39aa","keyName":"e2e-sub-iso-2436ea","subscription":"e2e-a-only-2c6b5e","tenant":"e2e-shared-a-bfa604","userId":"02aba4cc-c1d5-4a46-a57c-b759213f39aa","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"506150e4-e6a1-4dae-8b81-425beb58cce3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"506150e4-e6a1-4dae-8b81-425beb58cce3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"506150e4-e6a1-4dae-8b81-425beb58cce3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"506150e4-e6a1-4dae-8b81-425beb58cce3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bfa604/sub-test-model-bfa604\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bfa604/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"506150e4-e6a1-4dae-8b81-425beb58cce3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"506150e4-e6a1-4dae-8b81-425beb58cce3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"506150e4-e6a1-4dae-8b81-425beb58cce3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"506150e4-e6a1-4dae-8b81-425beb58cce3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-2c6b5e"} {"level":"info","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"506150e4-e6a1-4dae-8b81-425beb58cce3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"506150e4-e6a1-4dae-8b81-425beb58cce3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd3ad6ac-7623-4369-b24d-0aa1312d69bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:57248","PortSpecifier":{"PortValue":57248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cd3ad6ac-7623-4369-b24d-0aa1312d69bd","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd3ad6ac-7623-4369-b24d-0aa1312d69bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:57248","PortSpecifier":{"PortValue":57248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202383,"nanos":684733786},"http":{"id":"cd3ad6ac-7623-4369-b24d-0aa1312d69bd","method":"GET","headers":{":authority":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cd3ad6ac-7623-4369-b24d-0aa1312d69bd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Fuklbf82jZpADstT_85tYnf4XKdyZ7MdRJyrFBomWwAvi5ergx8EMv0J8bo9"} {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cd3ad6ac-7623-4369-b24d-0aa1312d69bd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f05981.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Fuklbf82jZpADstT_85tYnf4XKdyZ7MdRJyrFBomWwAvi5ergx8EMv0J8bo9\"}"} {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cd3ad6ac-7623-4369-b24d-0aa1312d69bd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f05981.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5ac9611a-1c03-4aa3-aa93-c16b92a3afbb","keyName":"e2e-sub-iso-38504e","subscription":"e2e-b-only-2c6b5e","tenant":"e2e-shared-b-f05981","userId":"5ac9611a-1c03-4aa3-aa93-c16b92a3afbb","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cd3ad6ac-7623-4369-b24d-0aa1312d69bd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd3ad6ac-7623-4369-b24d-0aa1312d69bd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd3ad6ac-7623-4369-b24d-0aa1312d69bd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd3ad6ac-7623-4369-b24d-0aa1312d69bd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f05981/sub-test-model-f05981\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f05981/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd3ad6ac-7623-4369-b24d-0aa1312d69bd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd3ad6ac-7623-4369-b24d-0aa1312d69bd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-2c6b5e"} {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd3ad6ac-7623-4369-b24d-0aa1312d69bd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cd3ad6ac-7623-4369-b24d-0aa1312d69bd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd3ad6ac-7623-4369-b24d-0aa1312d69bd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T11:46:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd3ad6ac-7623-4369-b24d-0aa1312d69bd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe547d07-f5f9-452b-a0af-fe7e744bf408","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:56762","PortSpecifier":{"PortValue":56762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fe547d07-f5f9-452b-a0af-fe7e744bf408","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe547d07-f5f9-452b-a0af-fe7e744bf408","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:56762","PortSpecifier":{"PortValue":56762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202393,"nanos":630150865},"http":{"id":"fe547d07-f5f9-452b-a0af-fe7e744bf408","method":"POST","headers":{":authority":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fe547d07-f5f9-452b-a0af-fe7e744bf408","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fe547d07-f5f9-452b-a0af-fe7e744bf408","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bcfd362-adad-4fee-9fc0-989533af6463","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"]}} {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fe547d07-f5f9-452b-a0af-fe7e744bf408","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bcfd362-adad-4fee-9fc0-989533af6463","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"092ad0e27bbde4ca8b0a6baaa2ece7401c379018e1a796d10591850772675a4b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe547d07-f5f9-452b-a0af-fe7e744bf408","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe547d07-f5f9-452b-a0af-fe7e744bf408","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe547d07-f5f9-452b-a0af-fe7e744bf408","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bfa604/sub-test-model-bfa604\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bfa604/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fe547d07-f5f9-452b-a0af-fe7e744bf408","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe547d07-f5f9-452b-a0af-fe7e744bf408","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe547d07-f5f9-452b-a0af-fe7e744bf408","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe547d07-f5f9-452b-a0af-fe7e744bf408","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe547d07-f5f9-452b-a0af-fe7e744bf408","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb477299-7b5a-4a95-8382-a86963118db2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:51578","PortSpecifier":{"PortValue":51578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eb477299-7b5a-4a95-8382-a86963118db2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb477299-7b5a-4a95-8382-a86963118db2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:51578","PortSpecifier":{"PortValue":51578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202393,"nanos":663394703},"http":{"id":"eb477299-7b5a-4a95-8382-a86963118db2","method":"POST","headers":{":authority":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"eb477299-7b5a-4a95-8382-a86963118db2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eb477299-7b5a-4a95-8382-a86963118db2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bcfd362-adad-4fee-9fc0-989533af6463","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"]}} {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eb477299-7b5a-4a95-8382-a86963118db2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bcfd362-adad-4fee-9fc0-989533af6463","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f5f21f844ba496cb41a119fe895991a22cc4c32f893e7dc7fdf076bb64e8081"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb477299-7b5a-4a95-8382-a86963118db2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb477299-7b5a-4a95-8382-a86963118db2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb477299-7b5a-4a95-8382-a86963118db2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f05981/sub-test-model-f05981\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f05981/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eb477299-7b5a-4a95-8382-a86963118db2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb477299-7b5a-4a95-8382-a86963118db2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb477299-7b5a-4a95-8382-a86963118db2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb477299-7b5a-4a95-8382-a86963118db2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb477299-7b5a-4a95-8382-a86963118db2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e14bb2ca-ef58-4cc0-96ff-af120da617df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:56774","PortSpecifier":{"PortValue":56774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e14bb2ca-ef58-4cc0-96ff-af120da617df","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e14bb2ca-ef58-4cc0-96ff-af120da617df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:56774","PortSpecifier":{"PortValue":56774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202393,"nanos":696705870},"http":{"id":"e14bb2ca-ef58-4cc0-96ff-af120da617df","method":"POST","headers":{":authority":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e14bb2ca-ef58-4cc0-96ff-af120da617df","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-dczNDBLE8rD8RK7F_uhK2HsdMh2rhWOLNv8S6wpvmGC1J9oEy6M5Rx2K6RUa"} {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e14bb2ca-ef58-4cc0-96ff-af120da617df","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bfa604.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-dczNDBLE8rD8RK7F_uhK2HsdMh2rhWOLNv8S6wpvmGC1J9oEy6M5Rx2K6RUa\"}"} {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e14bb2ca-ef58-4cc0-96ff-af120da617df","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bfa604.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8b5dcad3-8ab4-45aa-a2ae-3d9e2781ceb8","keyName":"e2e-sub-iso-9bf2c2","subscription":"e2e-shared-sub-e484a2","tenant":"e2e-shared-a-bfa604","userId":"8b5dcad3-8ab4-45aa-a2ae-3d9e2781ceb8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e14bb2ca-ef58-4cc0-96ff-af120da617df","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e14bb2ca-ef58-4cc0-96ff-af120da617df","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e14bb2ca-ef58-4cc0-96ff-af120da617df","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e14bb2ca-ef58-4cc0-96ff-af120da617df","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bfa604/sub-test-model-bfa604\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bfa604/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e14bb2ca-ef58-4cc0-96ff-af120da617df","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e14bb2ca-ef58-4cc0-96ff-af120da617df","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e14bb2ca-ef58-4cc0-96ff-af120da617df","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e14bb2ca-ef58-4cc0-96ff-af120da617df","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-e484a2"} {"level":"info","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e14bb2ca-ef58-4cc0-96ff-af120da617df","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e14bb2ca-ef58-4cc0-96ff-af120da617df","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8038a5f4-5186-46e7-81f8-da814a71572d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:51590","PortSpecifier":{"PortValue":51590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8038a5f4-5186-46e7-81f8-da814a71572d","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8038a5f4-5186-46e7-81f8-da814a71572d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:51590","PortSpecifier":{"PortValue":51590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202393,"nanos":721211440},"http":{"id":"8038a5f4-5186-46e7-81f8-da814a71572d","method":"POST","headers":{":authority":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8038a5f4-5186-46e7-81f8-da814a71572d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Ts6Ks2iKe1aDfgZl_uZegApHMYLekfu1Bad4C7bRiBWjIdS0rvrMxX8YvqXr"} {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8038a5f4-5186-46e7-81f8-da814a71572d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f05981.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Ts6Ks2iKe1aDfgZl_uZegApHMYLekfu1Bad4C7bRiBWjIdS0rvrMxX8YvqXr\"}"} {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8038a5f4-5186-46e7-81f8-da814a71572d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f05981.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"24e5a992-baf2-4e9b-a4b3-9623008248da","keyName":"e2e-sub-iso-3d1c9e","subscription":"e2e-shared-sub-e484a2","tenant":"e2e-shared-b-f05981","userId":"24e5a992-baf2-4e9b-a4b3-9623008248da","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8038a5f4-5186-46e7-81f8-da814a71572d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8038a5f4-5186-46e7-81f8-da814a71572d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8038a5f4-5186-46e7-81f8-da814a71572d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8038a5f4-5186-46e7-81f8-da814a71572d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f05981/sub-test-model-f05981\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f05981/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8038a5f4-5186-46e7-81f8-da814a71572d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8038a5f4-5186-46e7-81f8-da814a71572d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8038a5f4-5186-46e7-81f8-da814a71572d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-e484a2"} {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8038a5f4-5186-46e7-81f8-da814a71572d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8038a5f4-5186-46e7-81f8-da814a71572d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T11:46:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8038a5f4-5186-46e7-81f8-da814a71572d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T11:46:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9cff3e28c331b02fe52ec72c90d3eca03c23ca3ca613f468cc75d1aad7ade10d"} {"level":"info","ts":"2026-07-16T11:46:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f4cf216e1416fc008997f583954259a52d4b06b832b5c7d43c8549c58ae6f69"} {"level":"info","ts":"2026-07-16T11:46:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/003893cd40764cfac0e44c12a0e73a8b914b3b575fcbabd930e798cc197e7704"} {"level":"info","ts":"2026-07-16T11:46:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea7ca89ae1e4c9aaef00373a47669bf0952b5ad92a43243df411c3c8fdb78411"} {"level":"info","ts":"2026-07-16T11:46:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1991a6c0e4f83b171f86f22c0ccdb6cc306ff7a76f21bc170836eb1e29ea7f6d"} {"level":"info","ts":"2026-07-16T11:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d05ce7cdd55ebb4f04e917a9ccedb2d8aaa6904aa7ad5cb925629c324d72533f"} {"level":"info","ts":"2026-07-16T11:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ded6cb507c5f5d9489169ca2cc9a803d85a70ac4eb5026b9e0338b182da837ff"} {"level":"info","ts":"2026-07-16T11:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c20841b1eb41885a16baca0987d9997839ed0c8e8b6da4da8e2b6ec16153bb5"} {"level":"info","ts":"2026-07-16T11:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28f410ef9711c5203fec206a6b3bb49db614dd211ea3969a072433606ff64e7f"} {"level":"info","ts":"2026-07-16T11:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3aeeb5886c30cbf3bf9030085324d1431744e5189b1c30a0d89de55936259bd9"} {"level":"info","ts":"2026-07-16T11:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/32136489ee7f7bb724fd69e5d09f19fdb6610e7a0d270145f21e03844653d6ab"} {"level":"info","ts":"2026-07-16T11:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee136129aee91eaf7078b9d27f76ba60a1b0074ac3a111696269cc5e78772800"} {"level":"info","ts":"2026-07-16T11:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67bb02f7f42fc8f9ffce6a034bd5cf8640977ad209e4947435f115351cc665ec"} {"level":"info","ts":"2026-07-16T11:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd7ec8a3b6479bb28c2ad9bd0bee390e21b8686bed3969df0c15abb71db3244a"} {"level":"info","ts":"2026-07-16T11:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/234ee405212714c352b6a1c4f3619251e980f08f552dd1a2409c3c23735492c3"} {"level":"info","ts":"2026-07-16T11:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67538f5cfe7ee904270f7b3dc9d7a8514abc7ea71ea20ae4e70293584cc921bc"} {"level":"debug","ts":"2026-07-16T11:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd"} {"level":"info","ts":"2026-07-16T11:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd"} {"level":"debug","ts":"2026-07-16T11:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd"} {"level":"info","ts":"2026-07-16T11:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd"} {"level":"debug","ts":"2026-07-16T11:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd"} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd"} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd"} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd"} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd"} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf14a38135ac786493be1b3347d8fa5ee37f2ed1f5d99a0453d71e68bb709922","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf14a38135ac786493be1b3347d8fa5ee37f2ed1f5d99a0453d71e68bb709922","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf14a38135ac786493be1b3347d8fa5ee37f2ed1f5d99a0453d71e68bb709922","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf14a38135ac786493be1b3347d8fa5ee37f2ed1f5d99a0453d71e68bb709922","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf14a38135ac786493be1b3347d8fa5ee37f2ed1f5d99a0453d71e68bb709922"} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf14a38135ac786493be1b3347d8fa5ee37f2ed1f5d99a0453d71e68bb709922","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf14a38135ac786493be1b3347d8fa5ee37f2ed1f5d99a0453d71e68bb709922"} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf14a38135ac786493be1b3347d8fa5ee37f2ed1f5d99a0453d71e68bb709922","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf14a38135ac786493be1b3347d8fa5ee37f2ed1f5d99a0453d71e68bb709922"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf14a38135ac786493be1b3347d8fa5ee37f2ed1f5d99a0453d71e68bb709922","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf14a38135ac786493be1b3347d8fa5ee37f2ed1f5d99a0453d71e68bb709922","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf14a38135ac786493be1b3347d8fa5ee37f2ed1f5d99a0453d71e68bb709922"} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6"} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6"} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97dc5e1d72a035042d681f091ccec3e7d3d97bae7905cb570ece32bc9f98bba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97dc5e1d72a035042d681f091ccec3e7d3d97bae7905cb570ece32bc9f98bba0"} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97dc5e1d72a035042d681f091ccec3e7d3d97bae7905cb570ece32bc9f98bba0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97dc5e1d72a035042d681f091ccec3e7d3d97bae7905cb570ece32bc9f98bba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97dc5e1d72a035042d681f091ccec3e7d3d97bae7905cb570ece32bc9f98bba0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6"} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97dc5e1d72a035042d681f091ccec3e7d3d97bae7905cb570ece32bc9f98bba0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97dc5e1d72a035042d681f091ccec3e7d3d97bae7905cb570ece32bc9f98bba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97dc5e1d72a035042d681f091ccec3e7d3d97bae7905cb570ece32bc9f98bba0"} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97dc5e1d72a035042d681f091ccec3e7d3d97bae7905cb570ece32bc9f98bba0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6"} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97dc5e1d72a035042d681f091ccec3e7d3d97bae7905cb570ece32bc9f98bba0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15f2bb7d113ea5da11026651d31f4a155336c7a3d3e137dddbc914815363ed1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15f2bb7d113ea5da11026651d31f4a155336c7a3d3e137dddbc914815363ed1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97dc5e1d72a035042d681f091ccec3e7d3d97bae7905cb570ece32bc9f98bba0"} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97dc5e1d72a035042d681f091ccec3e7d3d97bae7905cb570ece32bc9f98bba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97dc5e1d72a035042d681f091ccec3e7d3d97bae7905cb570ece32bc9f98bba0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97dc5e1d72a035042d681f091ccec3e7d3d97bae7905cb570ece32bc9f98bba0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15f2bb7d113ea5da11026651d31f4a155336c7a3d3e137dddbc914815363ed1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15f2bb7d113ea5da11026651d31f4a155336c7a3d3e137dddbc914815363ed1a"} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15f2bb7d113ea5da11026651d31f4a155336c7a3d3e137dddbc914815363ed1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6"} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97dc5e1d72a035042d681f091ccec3e7d3d97bae7905cb570ece32bc9f98bba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97dc5e1d72a035042d681f091ccec3e7d3d97bae7905cb570ece32bc9f98bba0"} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97dc5e1d72a035042d681f091ccec3e7d3d97bae7905cb570ece32bc9f98bba0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15f2bb7d113ea5da11026651d31f4a155336c7a3d3e137dddbc914815363ed1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15f2bb7d113ea5da11026651d31f4a155336c7a3d3e137dddbc914815363ed1a"} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97dc5e1d72a035042d681f091ccec3e7d3d97bae7905cb570ece32bc9f98bba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97dc5e1d72a035042d681f091ccec3e7d3d97bae7905cb570ece32bc9f98bba0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97dc5e1d72a035042d681f091ccec3e7d3d97bae7905cb570ece32bc9f98bba0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6"} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15f2bb7d113ea5da11026651d31f4a155336c7a3d3e137dddbc914815363ed1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15f2bb7d113ea5da11026651d31f4a155336c7a3d3e137dddbc914815363ed1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15f2bb7d113ea5da11026651d31f4a155336c7a3d3e137dddbc914815363ed1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c84496e0ed9230b97167a5a2c223a30324cc175ed4ea16a6527cb8eb16d8171d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97dc5e1d72a035042d681f091ccec3e7d3d97bae7905cb570ece32bc9f98bba0"} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c84496e0ed9230b97167a5a2c223a30324cc175ed4ea16a6527cb8eb16d8171d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97dc5e1d72a035042d681f091ccec3e7d3d97bae7905cb570ece32bc9f98bba0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c84496e0ed9230b97167a5a2c223a30324cc175ed4ea16a6527cb8eb16d8171d"} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15f2bb7d113ea5da11026651d31f4a155336c7a3d3e137dddbc914815363ed1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c84496e0ed9230b97167a5a2c223a30324cc175ed4ea16a6527cb8eb16d8171d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c84496e0ed9230b97167a5a2c223a30324cc175ed4ea16a6527cb8eb16d8171d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c84496e0ed9230b97167a5a2c223a30324cc175ed4ea16a6527cb8eb16d8171d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6"} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c84496e0ed9230b97167a5a2c223a30324cc175ed4ea16a6527cb8eb16d8171d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"309dd3b9acba2191ec7349f231a09cd1a55dbf990207a1a3cc1c669a65c37037","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15f2bb7d113ea5da11026651d31f4a155336c7a3d3e137dddbc914815363ed1a"} {"level":"info","ts":"2026-07-16T11:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"309dd3b9acba2191ec7349f231a09cd1a55dbf990207a1a3cc1c669a65c37037","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"309dd3b9acba2191ec7349f231a09cd1a55dbf990207a1a3cc1c669a65c37037","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"309dd3b9acba2191ec7349f231a09cd1a55dbf990207a1a3cc1c669a65c37037","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c84496e0ed9230b97167a5a2c223a30324cc175ed4ea16a6527cb8eb16d8171d"} {"level":"debug","ts":"2026-07-16T11:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"309dd3b9acba2191ec7349f231a09cd1a55dbf990207a1a3cc1c669a65c37037","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6"} {"level":"info","ts":"2026-07-16T11:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/309dd3b9acba2191ec7349f231a09cd1a55dbf990207a1a3cc1c669a65c37037"} {"level":"debug","ts":"2026-07-16T11:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"309dd3b9acba2191ec7349f231a09cd1a55dbf990207a1a3cc1c669a65c37037","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["309dd3b9acba2191ec7349f231a09cd1a55dbf990207a1a3cc1c669a65c37037"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"309dd3b9acba2191ec7349f231a09cd1a55dbf990207a1a3cc1c669a65c37037","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"309dd3b9acba2191ec7349f231a09cd1a55dbf990207a1a3cc1c669a65c37037","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c07f3b050daddcf6b5b4d08ad525c6b02388ead403a2537c0b08a9d840a91b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c07f3b050daddcf6b5b4d08ad525c6b02388ead403a2537c0b08a9d840a91b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c07f3b050daddcf6b5b4d08ad525c6b02388ead403a2537c0b08a9d840a91b0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/309dd3b9acba2191ec7349f231a09cd1a55dbf990207a1a3cc1c669a65c37037"} {"level":"debug","ts":"2026-07-16T11:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c07f3b050daddcf6b5b4d08ad525c6b02388ead403a2537c0b08a9d840a91b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c07f3b050daddcf6b5b4d08ad525c6b02388ead403a2537c0b08a9d840a91b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c07f3b050daddcf6b5b4d08ad525c6b02388ead403a2537c0b08a9d840a91b0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c07f3b050daddcf6b5b4d08ad525c6b02388ead403a2537c0b08a9d840a91b0"} {"level":"debug","ts":"2026-07-16T11:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c07f3b050daddcf6b5b4d08ad525c6b02388ead403a2537c0b08a9d840a91b0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c07f3b050daddcf6b5b4d08ad525c6b02388ead403a2537c0b08a9d840a91b0"} {"level":"debug","ts":"2026-07-16T11:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c07f3b050daddcf6b5b4d08ad525c6b02388ead403a2537c0b08a9d840a91b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c07f3b050daddcf6b5b4d08ad525c6b02388ead403a2537c0b08a9d840a91b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c07f3b050daddcf6b5b4d08ad525c6b02388ead403a2537c0b08a9d840a91b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c07f3b050daddcf6b5b4d08ad525c6b02388ead403a2537c0b08a9d840a91b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c07f3b050daddcf6b5b4d08ad525c6b02388ead403a2537c0b08a9d840a91b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c07f3b050daddcf6b5b4d08ad525c6b02388ead403a2537c0b08a9d840a91b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c07f3b050daddcf6b5b4d08ad525c6b02388ead403a2537c0b08a9d840a91b0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c07f3b050daddcf6b5b4d08ad525c6b02388ead403a2537c0b08a9d840a91b0"} {"level":"debug","ts":"2026-07-16T11:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c07f3b050daddcf6b5b4d08ad525c6b02388ead403a2537c0b08a9d840a91b0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c07f3b050daddcf6b5b4d08ad525c6b02388ead403a2537c0b08a9d840a91b0"} {"level":"debug","ts":"2026-07-16T11:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c07f3b050daddcf6b5b4d08ad525c6b02388ead403a2537c0b08a9d840a91b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c07f3b050daddcf6b5b4d08ad525c6b02388ead403a2537c0b08a9d840a91b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c07f3b050daddcf6b5b4d08ad525c6b02388ead403a2537c0b08a9d840a91b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c07f3b050daddcf6b5b4d08ad525c6b02388ead403a2537c0b08a9d840a91b0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c07f3b050daddcf6b5b4d08ad525c6b02388ead403a2537c0b08a9d840a91b0"} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a451449db9b72f5b6637b1262bc05f8d60539cdc300cbf0d094e6ffdb9b42394","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a451449db9b72f5b6637b1262bc05f8d60539cdc300cbf0d094e6ffdb9b42394","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a451449db9b72f5b6637b1262bc05f8d60539cdc300cbf0d094e6ffdb9b42394","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a451449db9b72f5b6637b1262bc05f8d60539cdc300cbf0d094e6ffdb9b42394"} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a451449db9b72f5b6637b1262bc05f8d60539cdc300cbf0d094e6ffdb9b42394","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a451449db9b72f5b6637b1262bc05f8d60539cdc300cbf0d094e6ffdb9b42394","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a451449db9b72f5b6637b1262bc05f8d60539cdc300cbf0d094e6ffdb9b42394","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a451449db9b72f5b6637b1262bc05f8d60539cdc300cbf0d094e6ffdb9b42394\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a451449db9b72f5b6637b1262bc05f8d60539cdc300cbf0d094e6ffdb9b42394","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a451449db9b72f5b6637b1262bc05f8d60539cdc300cbf0d094e6ffdb9b42394","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a451449db9b72f5b6637b1262bc05f8d60539cdc300cbf0d094e6ffdb9b42394"} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a451449db9b72f5b6637b1262bc05f8d60539cdc300cbf0d094e6ffdb9b42394"} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbbf90060fb00e2697cb8200644b8d364c4531e21664ba7489567540653539aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbbf90060fb00e2697cb8200644b8d364c4531e21664ba7489567540653539aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbbf90060fb00e2697cb8200644b8d364c4531e21664ba7489567540653539aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbbf90060fb00e2697cb8200644b8d364c4531e21664ba7489567540653539aa"} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbbf90060fb00e2697cb8200644b8d364c4531e21664ba7489567540653539aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a451449db9b72f5b6637b1262bc05f8d60539cdc300cbf0d094e6ffdb9b42394","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a451449db9b72f5b6637b1262bc05f8d60539cdc300cbf0d094e6ffdb9b42394"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbbf90060fb00e2697cb8200644b8d364c4531e21664ba7489567540653539aa"} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a451449db9b72f5b6637b1262bc05f8d60539cdc300cbf0d094e6ffdb9b42394","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbbf90060fb00e2697cb8200644b8d364c4531e21664ba7489567540653539aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a451449db9b72f5b6637b1262bc05f8d60539cdc300cbf0d094e6ffdb9b42394","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbbf90060fb00e2697cb8200644b8d364c4531e21664ba7489567540653539aa"} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbbf90060fb00e2697cb8200644b8d364c4531e21664ba7489567540653539aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbbf90060fb00e2697cb8200644b8d364c4531e21664ba7489567540653539aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a451449db9b72f5b6637b1262bc05f8d60539cdc300cbf0d094e6ffdb9b42394"} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbbf90060fb00e2697cb8200644b8d364c4531e21664ba7489567540653539aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbbf90060fb00e2697cb8200644b8d364c4531e21664ba7489567540653539aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbbf90060fb00e2697cb8200644b8d364c4531e21664ba7489567540653539aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97c31f0ece6ef4d726a74e52671fd96ce742967e76fd5b4473b221b25332f14b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbbf90060fb00e2697cb8200644b8d364c4531e21664ba7489567540653539aa"} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97c31f0ece6ef4d726a74e52671fd96ce742967e76fd5b4473b221b25332f14b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbbf90060fb00e2697cb8200644b8d364c4531e21664ba7489567540653539aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbbf90060fb00e2697cb8200644b8d364c4531e21664ba7489567540653539aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97c31f0ece6ef4d726a74e52671fd96ce742967e76fd5b4473b221b25332f14b"} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbbf90060fb00e2697cb8200644b8d364c4531e21664ba7489567540653539aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97c31f0ece6ef4d726a74e52671fd96ce742967e76fd5b4473b221b25332f14b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97c31f0ece6ef4d726a74e52671fd96ce742967e76fd5b4473b221b25332f14b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97c31f0ece6ef4d726a74e52671fd96ce742967e76fd5b4473b221b25332f14b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbbf90060fb00e2697cb8200644b8d364c4531e21664ba7489567540653539aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbbf90060fb00e2697cb8200644b8d364c4531e21664ba7489567540653539aa"} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbbf90060fb00e2697cb8200644b8d364c4531e21664ba7489567540653539aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97c31f0ece6ef4d726a74e52671fd96ce742967e76fd5b4473b221b25332f14b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97c31f0ece6ef4d726a74e52671fd96ce742967e76fd5b4473b221b25332f14b"} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97c31f0ece6ef4d726a74e52671fd96ce742967e76fd5b4473b221b25332f14b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbbf90060fb00e2697cb8200644b8d364c4531e21664ba7489567540653539aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97c31f0ece6ef4d726a74e52671fd96ce742967e76fd5b4473b221b25332f14b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97c31f0ece6ef4d726a74e52671fd96ce742967e76fd5b4473b221b25332f14b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbbf90060fb00e2697cb8200644b8d364c4531e21664ba7489567540653539aa"} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97c31f0ece6ef4d726a74e52671fd96ce742967e76fd5b4473b221b25332f14b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbbf90060fb00e2697cb8200644b8d364c4531e21664ba7489567540653539aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbbf90060fb00e2697cb8200644b8d364c4531e21664ba7489567540653539aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97c31f0ece6ef4d726a74e52671fd96ce742967e76fd5b4473b221b25332f14b"} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbbf90060fb00e2697cb8200644b8d364c4531e21664ba7489567540653539aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97c31f0ece6ef4d726a74e52671fd96ce742967e76fd5b4473b221b25332f14b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b810cc4d816a005be97fb79a7548e95cb1c7058dedc3778cb5652d8f584bf275","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b810cc4d816a005be97fb79a7548e95cb1c7058dedc3778cb5652d8f584bf275","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbbf90060fb00e2697cb8200644b8d364c4531e21664ba7489567540653539aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73fd3492be26e2f2bc93564599beb72ae4bd2fd54c41e1d3ad5b803d0867628b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73fd3492be26e2f2bc93564599beb72ae4bd2fd54c41e1d3ad5b803d0867628b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b810cc4d816a005be97fb79a7548e95cb1c7058dedc3778cb5652d8f584bf275","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73fd3492be26e2f2bc93564599beb72ae4bd2fd54c41e1d3ad5b803d0867628b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b810cc4d816a005be97fb79a7548e95cb1c7058dedc3778cb5652d8f584bf275"} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73fd3492be26e2f2bc93564599beb72ae4bd2fd54c41e1d3ad5b803d0867628b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b810cc4d816a005be97fb79a7548e95cb1c7058dedc3778cb5652d8f584bf275","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b810cc4d816a005be97fb79a7548e95cb1c7058dedc3778cb5652d8f584bf275"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b810cc4d816a005be97fb79a7548e95cb1c7058dedc3778cb5652d8f584bf275","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73fd3492be26e2f2bc93564599beb72ae4bd2fd54c41e1d3ad5b803d0867628b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b810cc4d816a005be97fb79a7548e95cb1c7058dedc3778cb5652d8f584bf275","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34de04e01362a3f27048598152c04994fa5925e9c82954a7e840c0e1addd4934","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97c31f0ece6ef4d726a74e52671fd96ce742967e76fd5b4473b221b25332f14b"} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34de04e01362a3f27048598152c04994fa5925e9c82954a7e840c0e1addd4934","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34de04e01362a3f27048598152c04994fa5925e9c82954a7e840c0e1addd4934","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34de04e01362a3f27048598152c04994fa5925e9c82954a7e840c0e1addd4934","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73fd3492be26e2f2bc93564599beb72ae4bd2fd54c41e1d3ad5b803d0867628b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbbf90060fb00e2697cb8200644b8d364c4531e21664ba7489567540653539aa"} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34de04e01362a3f27048598152c04994fa5925e9c82954a7e840c0e1addd4934","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73fd3492be26e2f2bc93564599beb72ae4bd2fd54c41e1d3ad5b803d0867628b"} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b810cc4d816a005be97fb79a7548e95cb1c7058dedc3778cb5652d8f584bf275"} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34de04e01362a3f27048598152c04994fa5925e9c82954a7e840c0e1addd4934","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34de04e01362a3f27048598152c04994fa5925e9c82954a7e840c0e1addd4934"} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34de04e01362a3f27048598152c04994fa5925e9c82954a7e840c0e1addd4934","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34de04e01362a3f27048598152c04994fa5925e9c82954a7e840c0e1addd4934","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34de04e01362a3f27048598152c04994fa5925e9c82954a7e840c0e1addd4934"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34de04e01362a3f27048598152c04994fa5925e9c82954a7e840c0e1addd4934","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"716aaf72ded709d36b774b0ecf5ced3e48b80e27428a252df35d3dd4a44989ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34de04e01362a3f27048598152c04994fa5925e9c82954a7e840c0e1addd4934"} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"716aaf72ded709d36b774b0ecf5ced3e48b80e27428a252df35d3dd4a44989ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73fd3492be26e2f2bc93564599beb72ae4bd2fd54c41e1d3ad5b803d0867628b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73fd3492be26e2f2bc93564599beb72ae4bd2fd54c41e1d3ad5b803d0867628b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/716aaf72ded709d36b774b0ecf5ced3e48b80e27428a252df35d3dd4a44989ef"} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73fd3492be26e2f2bc93564599beb72ae4bd2fd54c41e1d3ad5b803d0867628b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34de04e01362a3f27048598152c04994fa5925e9c82954a7e840c0e1addd4934","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34de04e01362a3f27048598152c04994fa5925e9c82954a7e840c0e1addd4934","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"716aaf72ded709d36b774b0ecf5ced3e48b80e27428a252df35d3dd4a44989ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["716aaf72ded709d36b774b0ecf5ced3e48b80e27428a252df35d3dd4a44989ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34de04e01362a3f27048598152c04994fa5925e9c82954a7e840c0e1addd4934"} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"716aaf72ded709d36b774b0ecf5ced3e48b80e27428a252df35d3dd4a44989ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73fd3492be26e2f2bc93564599beb72ae4bd2fd54c41e1d3ad5b803d0867628b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34de04e01362a3f27048598152c04994fa5925e9c82954a7e840c0e1addd4934","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34de04e01362a3f27048598152c04994fa5925e9c82954a7e840c0e1addd4934"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/716aaf72ded709d36b774b0ecf5ced3e48b80e27428a252df35d3dd4a44989ef"} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34de04e01362a3f27048598152c04994fa5925e9c82954a7e840c0e1addd4934","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"716aaf72ded709d36b774b0ecf5ced3e48b80e27428a252df35d3dd4a44989ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34de04e01362a3f27048598152c04994fa5925e9c82954a7e840c0e1addd4934","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73fd3492be26e2f2bc93564599beb72ae4bd2fd54c41e1d3ad5b803d0867628b"} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3492d8a36c1da2d7045e85805b024bf37c2f741a97c76853c8ff41d796226676","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3492d8a36c1da2d7045e85805b024bf37c2f741a97c76853c8ff41d796226676","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3492d8a36c1da2d7045e85805b024bf37c2f741a97c76853c8ff41d796226676","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34de04e01362a3f27048598152c04994fa5925e9c82954a7e840c0e1addd4934"} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3492d8a36c1da2d7045e85805b024bf37c2f741a97c76853c8ff41d796226676","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/716aaf72ded709d36b774b0ecf5ced3e48b80e27428a252df35d3dd4a44989ef"} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3492d8a36c1da2d7045e85805b024bf37c2f741a97c76853c8ff41d796226676","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3492d8a36c1da2d7045e85805b024bf37c2f741a97c76853c8ff41d796226676","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3492d8a36c1da2d7045e85805b024bf37c2f741a97c76853c8ff41d796226676","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3492d8a36c1da2d7045e85805b024bf37c2f741a97c76853c8ff41d796226676"} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3492d8a36c1da2d7045e85805b024bf37c2f741a97c76853c8ff41d796226676"} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3492d8a36c1da2d7045e85805b024bf37c2f741a97c76853c8ff41d796226676","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3492d8a36c1da2d7045e85805b024bf37c2f741a97c76853c8ff41d796226676"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3492d8a36c1da2d7045e85805b024bf37c2f741a97c76853c8ff41d796226676","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3492d8a36c1da2d7045e85805b024bf37c2f741a97c76853c8ff41d796226676","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3492d8a36c1da2d7045e85805b024bf37c2f741a97c76853c8ff41d796226676"} {"level":"debug","ts":"2026-07-16T11:47:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a451449db9b72f5b6637b1262bc05f8d60539cdc300cbf0d094e6ffdb9b42394","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a451449db9b72f5b6637b1262bc05f8d60539cdc300cbf0d094e6ffdb9b42394","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a451449db9b72f5b6637b1262bc05f8d60539cdc300cbf0d094e6ffdb9b42394","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a451449db9b72f5b6637b1262bc05f8d60539cdc300cbf0d094e6ffdb9b42394","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a451449db9b72f5b6637b1262bc05f8d60539cdc300cbf0d094e6ffdb9b42394"} {"level":"debug","ts":"2026-07-16T11:47:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a451449db9b72f5b6637b1262bc05f8d60539cdc300cbf0d094e6ffdb9b42394","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a451449db9b72f5b6637b1262bc05f8d60539cdc300cbf0d094e6ffdb9b42394"} {"level":"debug","ts":"2026-07-16T11:47:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a451449db9b72f5b6637b1262bc05f8d60539cdc300cbf0d094e6ffdb9b42394","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a451449db9b72f5b6637b1262bc05f8d60539cdc300cbf0d094e6ffdb9b42394"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a451449db9b72f5b6637b1262bc05f8d60539cdc300cbf0d094e6ffdb9b42394","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a451449db9b72f5b6637b1262bc05f8d60539cdc300cbf0d094e6ffdb9b42394","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a451449db9b72f5b6637b1262bc05f8d60539cdc300cbf0d094e6ffdb9b42394","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a451449db9b72f5b6637b1262bc05f8d60539cdc300cbf0d094e6ffdb9b42394","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a451449db9b72f5b6637b1262bc05f8d60539cdc300cbf0d094e6ffdb9b42394","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a451449db9b72f5b6637b1262bc05f8d60539cdc300cbf0d094e6ffdb9b42394"} {"level":"debug","ts":"2026-07-16T11:47:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a451449db9b72f5b6637b1262bc05f8d60539cdc300cbf0d094e6ffdb9b42394","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a451449db9b72f5b6637b1262bc05f8d60539cdc300cbf0d094e6ffdb9b42394"} {"level":"debug","ts":"2026-07-16T11:47:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a451449db9b72f5b6637b1262bc05f8d60539cdc300cbf0d094e6ffdb9b42394","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a451449db9b72f5b6637b1262bc05f8d60539cdc300cbf0d094e6ffdb9b42394"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a451449db9b72f5b6637b1262bc05f8d60539cdc300cbf0d094e6ffdb9b42394","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a451449db9b72f5b6637b1262bc05f8d60539cdc300cbf0d094e6ffdb9b42394","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a451449db9b72f5b6637b1262bc05f8d60539cdc300cbf0d094e6ffdb9b42394"} {"level":"debug","ts":"2026-07-16T11:47:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c84496e0ed9230b97167a5a2c223a30324cc175ed4ea16a6527cb8eb16d8171d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c84496e0ed9230b97167a5a2c223a30324cc175ed4ea16a6527cb8eb16d8171d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c84496e0ed9230b97167a5a2c223a30324cc175ed4ea16a6527cb8eb16d8171d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c84496e0ed9230b97167a5a2c223a30324cc175ed4ea16a6527cb8eb16d8171d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c84496e0ed9230b97167a5a2c223a30324cc175ed4ea16a6527cb8eb16d8171d"} {"level":"debug","ts":"2026-07-16T11:47:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c84496e0ed9230b97167a5a2c223a30324cc175ed4ea16a6527cb8eb16d8171d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c84496e0ed9230b97167a5a2c223a30324cc175ed4ea16a6527cb8eb16d8171d"} {"level":"debug","ts":"2026-07-16T11:47:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c84496e0ed9230b97167a5a2c223a30324cc175ed4ea16a6527cb8eb16d8171d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c84496e0ed9230b97167a5a2c223a30324cc175ed4ea16a6527cb8eb16d8171d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c84496e0ed9230b97167a5a2c223a30324cc175ed4ea16a6527cb8eb16d8171d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c84496e0ed9230b97167a5a2c223a30324cc175ed4ea16a6527cb8eb16d8171d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c84496e0ed9230b97167a5a2c223a30324cc175ed4ea16a6527cb8eb16d8171d"} {"level":"debug","ts":"2026-07-16T11:47:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"092ad0e27bbde4ca8b0a6baaa2ece7401c379018e1a796d10591850772675a4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9"} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092ad0e27bbde4ca8b0a6baaa2ece7401c379018e1a796d10591850772675a4b"} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9"} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9"} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73fd3492be26e2f2bc93564599beb72ae4bd2fd54c41e1d3ad5b803d0867628b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9"} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73fd3492be26e2f2bc93564599beb72ae4bd2fd54c41e1d3ad5b803d0867628b"} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9"} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9"} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97c31f0ece6ef4d726a74e52671fd96ce742967e76fd5b4473b221b25332f14b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20"} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97c31f0ece6ef4d726a74e52671fd96ce742967e76fd5b4473b221b25332f14b"} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20"} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9"} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c07f3b050daddcf6b5b4d08ad525c6b02388ead403a2537c0b08a9d840a91b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20"} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c07f3b050daddcf6b5b4d08ad525c6b02388ead403a2537c0b08a9d840a91b0"} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20"} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20"} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"716aaf72ded709d36b774b0ecf5ced3e48b80e27428a252df35d3dd4a44989ef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20"} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/716aaf72ded709d36b774b0ecf5ced3e48b80e27428a252df35d3dd4a44989ef"} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20"} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a71b25e00399935bd9c60371d83293d4a4d9a9e8acec6ef81657e04244b2c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a71b25e00399935bd9c60371d83293d4a4d9a9e8acec6ef81657e04244b2c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a71b25e00399935bd9c60371d83293d4a4d9a9e8acec6ef81657e04244b2c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a71b25e00399935bd9c60371d83293d4a4d9a9e8acec6ef81657e04244b2c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a71b25e00399935bd9c60371d83293d4a4d9a9e8acec6ef81657e04244b2c20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a71b25e00399935bd9c60371d83293d4a4d9a9e8acec6ef81657e04244b2c20"} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a71b25e00399935bd9c60371d83293d4a4d9a9e8acec6ef81657e04244b2c20"} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a71b25e00399935bd9c60371d83293d4a4d9a9e8acec6ef81657e04244b2c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a71b25e00399935bd9c60371d83293d4a4d9a9e8acec6ef81657e04244b2c20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a71b25e00399935bd9c60371d83293d4a4d9a9e8acec6ef81657e04244b2c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a71b25e00399935bd9c60371d83293d4a4d9a9e8acec6ef81657e04244b2c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0"} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a71b25e00399935bd9c60371d83293d4a4d9a9e8acec6ef81657e04244b2c20"} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0"} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0"} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0"} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0"} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0"} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0"} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0"} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b810cc4d816a005be97fb79a7548e95cb1c7058dedc3778cb5652d8f584bf275","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6"} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b810cc4d816a005be97fb79a7548e95cb1c7058dedc3778cb5652d8f584bf275"} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd"} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0"} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd"} {"level":"info","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbbf90060fb00e2697cb8200644b8d364c4531e21664ba7489567540653539aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:47:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbbf90060fb00e2697cb8200644b8d364c4531e21664ba7489567540653539aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:48:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:48:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbbf90060fb00e2697cb8200644b8d364c4531e21664ba7489567540653539aa"} {"level":"info","ts":"2026-07-16T11:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbbf90060fb00e2697cb8200644b8d364c4531e21664ba7489567540653539aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:48:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:48:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbbf90060fb00e2697cb8200644b8d364c4531e21664ba7489567540653539aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T11:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd"} {"level":"info","ts":"2026-07-16T11:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbbf90060fb00e2697cb8200644b8d364c4531e21664ba7489567540653539aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34de04e01362a3f27048598152c04994fa5925e9c82954a7e840c0e1addd4934","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15f2bb7d113ea5da11026651d31f4a155336c7a3d3e137dddbc914815363ed1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbbf90060fb00e2697cb8200644b8d364c4531e21664ba7489567540653539aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb"} {"level":"info","ts":"2026-07-16T11:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbbf90060fb00e2697cb8200644b8d364c4531e21664ba7489567540653539aa"} {"level":"debug","ts":"2026-07-16T11:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf14a38135ac786493be1b3347d8fa5ee37f2ed1f5d99a0453d71e68bb709922","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34de04e01362a3f27048598152c04994fa5925e9c82954a7e840c0e1addd4934"} {"level":"debug","ts":"2026-07-16T11:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97dc5e1d72a035042d681f091ccec3e7d3d97bae7905cb570ece32bc9f98bba0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T11:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"309dd3b9acba2191ec7349f231a09cd1a55dbf990207a1a3cc1c669a65c37037","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd"} {"level":"debug","ts":"2026-07-16T11:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3492d8a36c1da2d7045e85805b024bf37c2f741a97c76853c8ff41d796226676","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15f2bb7d113ea5da11026651d31f4a155336c7a3d3e137dddbc914815363ed1a"} {"level":"debug","ts":"2026-07-16T11:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f5f21f844ba496cb41a119fe895991a22cc4c32f893e7dc7fdf076bb64e8081","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf14a38135ac786493be1b3347d8fa5ee37f2ed1f5d99a0453d71e68bb709922"} {"level":"debug","ts":"2026-07-16T11:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33d598ceb2239933f0478cd208772372cd480cc158ade89d05b67953f6c3e0e7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T11:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97dc5e1d72a035042d681f091ccec3e7d3d97bae7905cb570ece32bc9f98bba0"} {"level":"info","ts":"2026-07-16T11:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/309dd3b9acba2191ec7349f231a09cd1a55dbf990207a1a3cc1c669a65c37037"} {"level":"info","ts":"2026-07-16T11:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3492d8a36c1da2d7045e85805b024bf37c2f741a97c76853c8ff41d796226676"} {"level":"info","ts":"2026-07-16T11:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f5f21f844ba496cb41a119fe895991a22cc4c32f893e7dc7fdf076bb64e8081"} {"level":"info","ts":"2026-07-16T11:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33d598ceb2239933f0478cd208772372cd480cc158ade89d05b67953f6c3e0e7"} {"level":"info","ts":"2026-07-16T11:48:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1fcc3838-53e8-46e0-8141-9bfb44cd4f70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:46236","PortSpecifier":{"PortValue":46236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1fcc3838-53e8-46e0-8141-9bfb44cd4f70","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T11:48:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1fcc3838-53e8-46e0-8141-9bfb44cd4f70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:46236","PortSpecifier":{"PortValue":46236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202481,"nanos":722011223},"http":{"id":"1fcc3838-53e8-46e0-8141-9bfb44cd4f70","method":"POST","headers":{":authority":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:48:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1fcc3838-53e8-46e0-8141-9bfb44cd4f70","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T11:48:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1fcc3838-53e8-46e0-8141-9bfb44cd4f70","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bcfd362-adad-4fee-9fc0-989533af6463","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"]}} {"level":"debug","ts":"2026-07-16T11:48:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1fcc3838-53e8-46e0-8141-9bfb44cd4f70","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bcfd362-adad-4fee-9fc0-989533af6463","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"092ad0e27bbde4ca8b0a6baaa2ece7401c379018e1a796d10591850772675a4b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:48:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fcc3838-53e8-46e0-8141-9bfb44cd4f70","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:48:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fcc3838-53e8-46e0-8141-9bfb44cd4f70","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:48:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fcc3838-53e8-46e0-8141-9bfb44cd4f70","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bfa604/rate-test-model-bfa604\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bfa604/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:48:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1fcc3838-53e8-46e0-8141-9bfb44cd4f70","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T11:48:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1fcc3838-53e8-46e0-8141-9bfb44cd4f70","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T11:48:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1fcc3838-53e8-46e0-8141-9bfb44cd4f70","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T11:48:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1fcc3838-53e8-46e0-8141-9bfb44cd4f70","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T11:48:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1fcc3838-53e8-46e0-8141-9bfb44cd4f70","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T11:48:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c787db3d-7c7a-4f9e-b1ca-02c892a2dbc3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:54924","PortSpecifier":{"PortValue":54924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c787db3d-7c7a-4f9e-b1ca-02c892a2dbc3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T11:48:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c787db3d-7c7a-4f9e-b1ca-02c892a2dbc3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:54924","PortSpecifier":{"PortValue":54924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202481,"nanos":768846979},"http":{"id":"c787db3d-7c7a-4f9e-b1ca-02c892a2dbc3","method":"POST","headers":{":authority":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:48:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c787db3d-7c7a-4f9e-b1ca-02c892a2dbc3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T11:48:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c787db3d-7c7a-4f9e-b1ca-02c892a2dbc3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bcfd362-adad-4fee-9fc0-989533af6463","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"]}} {"level":"debug","ts":"2026-07-16T11:48:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c787db3d-7c7a-4f9e-b1ca-02c892a2dbc3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bcfd362-adad-4fee-9fc0-989533af6463","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f5f21f844ba496cb41a119fe895991a22cc4c32f893e7dc7fdf076bb64e8081"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:48:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c787db3d-7c7a-4f9e-b1ca-02c892a2dbc3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:48:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c787db3d-7c7a-4f9e-b1ca-02c892a2dbc3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:48:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c787db3d-7c7a-4f9e-b1ca-02c892a2dbc3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f05981/rate-test-model-f05981\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f05981/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:48:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c787db3d-7c7a-4f9e-b1ca-02c892a2dbc3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T11:48:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c787db3d-7c7a-4f9e-b1ca-02c892a2dbc3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T11:48:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c787db3d-7c7a-4f9e-b1ca-02c892a2dbc3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T11:48:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c787db3d-7c7a-4f9e-b1ca-02c892a2dbc3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T11:48:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c787db3d-7c7a-4f9e-b1ca-02c892a2dbc3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T11:48:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21bae3f6-d3cc-48aa-a046-4eef52157e8f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:46242","PortSpecifier":{"PortValue":46242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"21bae3f6-d3cc-48aa-a046-4eef52157e8f","method":"POST","path":"/ai-tenant-e2e-shared-a-bfa604/rate-test-model-bfa604/v1/completions","host":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T11:48:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21bae3f6-d3cc-48aa-a046-4eef52157e8f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:46242","PortSpecifier":{"PortValue":46242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202481,"nanos":808287083},"http":{"id":"21bae3f6-d3cc-48aa-a046-4eef52157e8f","method":"POST","headers":{":authority":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bfa604/rate-test-model-bfa604/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:48:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"21bae3f6-d3cc-48aa-a046-4eef52157e8f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1WMFYTDUBQNx7YJ9q_3VvmBuvEQwJKxVaUPEnfnSlqP03MciHrTtQkaJdM1e4"} {"level":"debug","ts":"2026-07-16T11:48:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"21bae3f6-d3cc-48aa-a046-4eef52157e8f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bfa604.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1WMFYTDUBQNx7YJ9q_3VvmBuvEQwJKxVaUPEnfnSlqP03MciHrTtQkaJdM1e4\"}"} {"level":"debug","ts":"2026-07-16T11:48:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"21bae3f6-d3cc-48aa-a046-4eef52157e8f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bfa604.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7f70eccd-cbc1-4368-93e8-01fa9d023abb","keyName":"e2e-rate-a-9bd523","subscription":"e2e-rate-iso-a-9bd523","tenant":"e2e-shared-a-bfa604","userId":"7f70eccd-cbc1-4368-93e8-01fa9d023abb","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T11:48:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"21bae3f6-d3cc-48aa-a046-4eef52157e8f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bfa604.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bfa604/rate-test-model-bfa604\",\"requestedSubscription\":\"e2e-rate-iso-a-9bd523\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T11:48:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"21bae3f6-d3cc-48aa-a046-4eef52157e8f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bfa604.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bfa604","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9bd523","namespace":"ai-tenant-e2e-shared-a-bfa604","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T11:48:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"21bae3f6-d3cc-48aa-a046-4eef52157e8f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:48:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21bae3f6-d3cc-48aa-a046-4eef52157e8f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:48:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21bae3f6-d3cc-48aa-a046-4eef52157e8f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:48:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21bae3f6-d3cc-48aa-a046-4eef52157e8f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bfa604/rate-test-model-bfa604\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bfa604/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:48:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21bae3f6-d3cc-48aa-a046-4eef52157e8f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:48:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21bae3f6-d3cc-48aa-a046-4eef52157e8f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T11:48:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21bae3f6-d3cc-48aa-a046-4eef52157e8f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T11:48:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21bae3f6-d3cc-48aa-a046-4eef52157e8f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9bd523"} {"level":"debug","ts":"2026-07-16T11:48:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21bae3f6-d3cc-48aa-a046-4eef52157e8f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7f70eccd-cbc1-4368-93e8-01fa9d023abb","keyName":"e2e-rate-a-9bd523","selected_subscription":"e2e-rate-iso-a-9bd523","selected_subscription_key":"ai-tenant-e2e-shared-a-bfa604/e2e-rate-iso-a-9bd523@ai-tenant-e2e-shared-a-bfa604/rate-test-model-bfa604","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bfa604","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9bd523","namespace":"ai-tenant-e2e-shared-a-bfa604","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T11:48:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21bae3f6-d3cc-48aa-a046-4eef52157e8f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T11:48:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21bae3f6-d3cc-48aa-a046-4eef52157e8f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T11:48:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f8cae09-8c9f-46ba-8962-54f5eafe189e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:46246","PortSpecifier":{"PortValue":46246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5f8cae09-8c9f-46ba-8962-54f5eafe189e","method":"POST","path":"/ai-tenant-e2e-shared-a-bfa604/rate-test-model-bfa604/v1/completions","host":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T11:48:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f8cae09-8c9f-46ba-8962-54f5eafe189e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:46246","PortSpecifier":{"PortValue":46246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202482,"nanos":872073566},"http":{"id":"5f8cae09-8c9f-46ba-8962-54f5eafe189e","method":"POST","headers":{":authority":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bfa604/rate-test-model-bfa604/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:48:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5f8cae09-8c9f-46ba-8962-54f5eafe189e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1WMFYTDUBQNx7YJ9q_3VvmBuvEQwJKxVaUPEnfnSlqP03MciHrTtQkaJdM1e4"} {"level":"debug","ts":"2026-07-16T11:48:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5f8cae09-8c9f-46ba-8962-54f5eafe189e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bfa604.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1WMFYTDUBQNx7YJ9q_3VvmBuvEQwJKxVaUPEnfnSlqP03MciHrTtQkaJdM1e4\"}"} {"level":"debug","ts":"2026-07-16T11:48:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5f8cae09-8c9f-46ba-8962-54f5eafe189e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bfa604.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7f70eccd-cbc1-4368-93e8-01fa9d023abb","keyName":"e2e-rate-a-9bd523","subscription":"e2e-rate-iso-a-9bd523","tenant":"e2e-shared-a-bfa604","userId":"7f70eccd-cbc1-4368-93e8-01fa9d023abb","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T11:48:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5f8cae09-8c9f-46ba-8962-54f5eafe189e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bfa604.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bfa604/rate-test-model-bfa604\",\"requestedSubscription\":\"e2e-rate-iso-a-9bd523\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T11:48:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5f8cae09-8c9f-46ba-8962-54f5eafe189e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bfa604.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bfa604","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9bd523","namespace":"ai-tenant-e2e-shared-a-bfa604","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T11:48:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5f8cae09-8c9f-46ba-8962-54f5eafe189e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:48:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f8cae09-8c9f-46ba-8962-54f5eafe189e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:48:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f8cae09-8c9f-46ba-8962-54f5eafe189e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:48:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f8cae09-8c9f-46ba-8962-54f5eafe189e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:48:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f8cae09-8c9f-46ba-8962-54f5eafe189e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bfa604/rate-test-model-bfa604\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bfa604/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:48:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f8cae09-8c9f-46ba-8962-54f5eafe189e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T11:48:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f8cae09-8c9f-46ba-8962-54f5eafe189e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T11:48:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f8cae09-8c9f-46ba-8962-54f5eafe189e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9bd523"} {"level":"debug","ts":"2026-07-16T11:48:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f8cae09-8c9f-46ba-8962-54f5eafe189e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7f70eccd-cbc1-4368-93e8-01fa9d023abb","keyName":"e2e-rate-a-9bd523","selected_subscription":"e2e-rate-iso-a-9bd523","selected_subscription_key":"ai-tenant-e2e-shared-a-bfa604/e2e-rate-iso-a-9bd523@ai-tenant-e2e-shared-a-bfa604/rate-test-model-bfa604","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bfa604","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9bd523","namespace":"ai-tenant-e2e-shared-a-bfa604","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T11:48:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f8cae09-8c9f-46ba-8962-54f5eafe189e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T11:48:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f8cae09-8c9f-46ba-8962-54f5eafe189e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T11:48:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4036cf5b-09cc-4906-92c9-b59808d38405","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:46262","PortSpecifier":{"PortValue":46262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4036cf5b-09cc-4906-92c9-b59808d38405","method":"POST","path":"/ai-tenant-e2e-shared-a-bfa604/rate-test-model-bfa604/v1/completions","host":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T11:48:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4036cf5b-09cc-4906-92c9-b59808d38405","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:46262","PortSpecifier":{"PortValue":46262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202483,"nanos":910610935},"http":{"id":"4036cf5b-09cc-4906-92c9-b59808d38405","method":"POST","headers":{":authority":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bfa604/rate-test-model-bfa604/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:48:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4036cf5b-09cc-4906-92c9-b59808d38405","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1WMFYTDUBQNx7YJ9q_3VvmBuvEQwJKxVaUPEnfnSlqP03MciHrTtQkaJdM1e4"} {"level":"debug","ts":"2026-07-16T11:48:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4036cf5b-09cc-4906-92c9-b59808d38405","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bfa604.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1WMFYTDUBQNx7YJ9q_3VvmBuvEQwJKxVaUPEnfnSlqP03MciHrTtQkaJdM1e4\"}"} {"level":"debug","ts":"2026-07-16T11:48:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4036cf5b-09cc-4906-92c9-b59808d38405","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bfa604.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7f70eccd-cbc1-4368-93e8-01fa9d023abb","keyName":"e2e-rate-a-9bd523","subscription":"e2e-rate-iso-a-9bd523","tenant":"e2e-shared-a-bfa604","userId":"7f70eccd-cbc1-4368-93e8-01fa9d023abb","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T11:48:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4036cf5b-09cc-4906-92c9-b59808d38405","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bfa604.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bfa604/rate-test-model-bfa604\",\"requestedSubscription\":\"e2e-rate-iso-a-9bd523\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T11:48:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4036cf5b-09cc-4906-92c9-b59808d38405","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bfa604.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bfa604","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9bd523","namespace":"ai-tenant-e2e-shared-a-bfa604","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T11:48:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4036cf5b-09cc-4906-92c9-b59808d38405","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:48:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4036cf5b-09cc-4906-92c9-b59808d38405","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:48:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4036cf5b-09cc-4906-92c9-b59808d38405","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:48:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4036cf5b-09cc-4906-92c9-b59808d38405","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:48:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4036cf5b-09cc-4906-92c9-b59808d38405","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bfa604/rate-test-model-bfa604\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bfa604/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:48:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4036cf5b-09cc-4906-92c9-b59808d38405","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T11:48:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4036cf5b-09cc-4906-92c9-b59808d38405","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9bd523"} {"level":"debug","ts":"2026-07-16T11:48:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4036cf5b-09cc-4906-92c9-b59808d38405","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T11:48:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4036cf5b-09cc-4906-92c9-b59808d38405","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7f70eccd-cbc1-4368-93e8-01fa9d023abb","keyName":"e2e-rate-a-9bd523","selected_subscription":"e2e-rate-iso-a-9bd523","selected_subscription_key":"ai-tenant-e2e-shared-a-bfa604/e2e-rate-iso-a-9bd523@ai-tenant-e2e-shared-a-bfa604/rate-test-model-bfa604","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bfa604","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9bd523","namespace":"ai-tenant-e2e-shared-a-bfa604","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T11:48:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4036cf5b-09cc-4906-92c9-b59808d38405","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T11:48:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4036cf5b-09cc-4906-92c9-b59808d38405","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T11:48:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"965386a0-6a13-472f-aa03-700e97ebc469","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:34360","PortSpecifier":{"PortValue":34360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"965386a0-6a13-472f-aa03-700e97ebc469","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T11:48:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"965386a0-6a13-472f-aa03-700e97ebc469","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:34360","PortSpecifier":{"PortValue":34360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202496,"nanos":792628765},"http":{"id":"965386a0-6a13-472f-aa03-700e97ebc469","method":"POST","headers":{":authority":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:48:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"965386a0-6a13-472f-aa03-700e97ebc469","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T11:48:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"965386a0-6a13-472f-aa03-700e97ebc469","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bcfd362-adad-4fee-9fc0-989533af6463","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"]}} {"level":"debug","ts":"2026-07-16T11:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"965386a0-6a13-472f-aa03-700e97ebc469","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bcfd362-adad-4fee-9fc0-989533af6463","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"092ad0e27bbde4ca8b0a6baaa2ece7401c379018e1a796d10591850772675a4b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"965386a0-6a13-472f-aa03-700e97ebc469","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"965386a0-6a13-472f-aa03-700e97ebc469","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"965386a0-6a13-472f-aa03-700e97ebc469","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bfa604/rate-test-model-bfa604\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bfa604/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:48:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"965386a0-6a13-472f-aa03-700e97ebc469","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T11:48:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"965386a0-6a13-472f-aa03-700e97ebc469","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T11:48:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"965386a0-6a13-472f-aa03-700e97ebc469","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T11:48:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"965386a0-6a13-472f-aa03-700e97ebc469","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T11:48:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"965386a0-6a13-472f-aa03-700e97ebc469","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T11:48:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a1ecf19-3999-437e-a3ae-4e2af545ba11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:60722","PortSpecifier":{"PortValue":60722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1a1ecf19-3999-437e-a3ae-4e2af545ba11","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T11:48:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a1ecf19-3999-437e-a3ae-4e2af545ba11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:60722","PortSpecifier":{"PortValue":60722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202496,"nanos":831217900},"http":{"id":"1a1ecf19-3999-437e-a3ae-4e2af545ba11","method":"POST","headers":{":authority":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:48:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1a1ecf19-3999-437e-a3ae-4e2af545ba11","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T11:48:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1a1ecf19-3999-437e-a3ae-4e2af545ba11","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bcfd362-adad-4fee-9fc0-989533af6463","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"]}} {"level":"debug","ts":"2026-07-16T11:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1a1ecf19-3999-437e-a3ae-4e2af545ba11","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7282b5765a1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6354b062-1512-41de-863e-b6727042c5e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bcfd362-adad-4fee-9fc0-989533af6463","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f5f21f844ba496cb41a119fe895991a22cc4c32f893e7dc7fdf076bb64e8081"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a1ecf19-3999-437e-a3ae-4e2af545ba11","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a1ecf19-3999-437e-a3ae-4e2af545ba11","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a1ecf19-3999-437e-a3ae-4e2af545ba11","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f05981/rate-test-model-f05981\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f05981/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:48:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1a1ecf19-3999-437e-a3ae-4e2af545ba11","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T11:48:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a1ecf19-3999-437e-a3ae-4e2af545ba11","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T11:48:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a1ecf19-3999-437e-a3ae-4e2af545ba11","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T11:48:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a1ecf19-3999-437e-a3ae-4e2af545ba11","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T11:48:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a1ecf19-3999-437e-a3ae-4e2af545ba11","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T11:48:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ee6fe89-e7d1-4993-b873-826bcf5f6bc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:34370","PortSpecifier":{"PortValue":34370}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8ee6fe89-e7d1-4993-b873-826bcf5f6bc0","method":"POST","path":"/ai-tenant-e2e-shared-a-bfa604/rate-test-model-bfa604/v1/completions","host":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T11:48:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ee6fe89-e7d1-4993-b873-826bcf5f6bc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:34370","PortSpecifier":{"PortValue":34370}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202496,"nanos":870624894},"http":{"id":"8ee6fe89-e7d1-4993-b873-826bcf5f6bc0","method":"POST","headers":{":authority":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bfa604/rate-test-model-bfa604/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:48:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8ee6fe89-e7d1-4993-b873-826bcf5f6bc0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hINrLW7ytiN6S8Qx_tyfYoenOapuqOiKb6YLNx9dui3iPFbqBYr4c9zP7hpv"} {"level":"debug","ts":"2026-07-16T11:48:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8ee6fe89-e7d1-4993-b873-826bcf5f6bc0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bfa604.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-hINrLW7ytiN6S8Qx_tyfYoenOapuqOiKb6YLNx9dui3iPFbqBYr4c9zP7hpv\"}"} {"level":"debug","ts":"2026-07-16T11:48:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8ee6fe89-e7d1-4993-b873-826bcf5f6bc0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bfa604.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d5eda4b6-0c27-4f61-a38f-ec26578468fc","keyName":"e2e-rate-a-bc75dd","subscription":"e2e-rate-iso-a-bc75dd","tenant":"e2e-shared-a-bfa604","userId":"d5eda4b6-0c27-4f61-a38f-ec26578468fc","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T11:48:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8ee6fe89-e7d1-4993-b873-826bcf5f6bc0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bfa604.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bfa604/rate-test-model-bfa604\",\"requestedSubscription\":\"e2e-rate-iso-a-bc75dd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T11:48:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8ee6fe89-e7d1-4993-b873-826bcf5f6bc0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bfa604.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bfa604","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bc75dd","namespace":"ai-tenant-e2e-shared-a-bfa604","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T11:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8ee6fe89-e7d1-4993-b873-826bcf5f6bc0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ee6fe89-e7d1-4993-b873-826bcf5f6bc0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ee6fe89-e7d1-4993-b873-826bcf5f6bc0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ee6fe89-e7d1-4993-b873-826bcf5f6bc0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bfa604/rate-test-model-bfa604\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bfa604/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ee6fe89-e7d1-4993-b873-826bcf5f6bc0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:48:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ee6fe89-e7d1-4993-b873-826bcf5f6bc0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T11:48:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ee6fe89-e7d1-4993-b873-826bcf5f6bc0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T11:48:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ee6fe89-e7d1-4993-b873-826bcf5f6bc0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bc75dd"} {"level":"debug","ts":"2026-07-16T11:48:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ee6fe89-e7d1-4993-b873-826bcf5f6bc0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d5eda4b6-0c27-4f61-a38f-ec26578468fc","keyName":"e2e-rate-a-bc75dd","selected_subscription":"e2e-rate-iso-a-bc75dd","selected_subscription_key":"ai-tenant-e2e-shared-a-bfa604/e2e-rate-iso-a-bc75dd@ai-tenant-e2e-shared-a-bfa604/rate-test-model-bfa604","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bfa604","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bc75dd","namespace":"ai-tenant-e2e-shared-a-bfa604","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T11:48:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ee6fe89-e7d1-4993-b873-826bcf5f6bc0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T11:48:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ee6fe89-e7d1-4993-b873-826bcf5f6bc0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T11:48:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1af5ff2c-9ffd-442e-8fcf-4bdb43a4d00f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:34138","PortSpecifier":{"PortValue":34138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1af5ff2c-9ffd-442e-8fcf-4bdb43a4d00f","method":"POST","path":"/ai-tenant-e2e-shared-a-bfa604/rate-test-model-bfa604/v1/completions","host":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T11:48:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1af5ff2c-9ffd-442e-8fcf-4bdb43a4d00f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:34138","PortSpecifier":{"PortValue":34138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202497,"nanos":908950658},"http":{"id":"1af5ff2c-9ffd-442e-8fcf-4bdb43a4d00f","method":"POST","headers":{":authority":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bfa604/rate-test-model-bfa604/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:48:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1af5ff2c-9ffd-442e-8fcf-4bdb43a4d00f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hINrLW7ytiN6S8Qx_tyfYoenOapuqOiKb6YLNx9dui3iPFbqBYr4c9zP7hpv"} {"level":"debug","ts":"2026-07-16T11:48:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1af5ff2c-9ffd-442e-8fcf-4bdb43a4d00f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bfa604.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-hINrLW7ytiN6S8Qx_tyfYoenOapuqOiKb6YLNx9dui3iPFbqBYr4c9zP7hpv\"}"} {"level":"debug","ts":"2026-07-16T11:48:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1af5ff2c-9ffd-442e-8fcf-4bdb43a4d00f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bfa604.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d5eda4b6-0c27-4f61-a38f-ec26578468fc","keyName":"e2e-rate-a-bc75dd","subscription":"e2e-rate-iso-a-bc75dd","tenant":"e2e-shared-a-bfa604","userId":"d5eda4b6-0c27-4f61-a38f-ec26578468fc","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T11:48:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1af5ff2c-9ffd-442e-8fcf-4bdb43a4d00f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bfa604.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bfa604/rate-test-model-bfa604\",\"requestedSubscription\":\"e2e-rate-iso-a-bc75dd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T11:48:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1af5ff2c-9ffd-442e-8fcf-4bdb43a4d00f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bfa604.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bfa604","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bc75dd","namespace":"ai-tenant-e2e-shared-a-bfa604","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T11:48:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1af5ff2c-9ffd-442e-8fcf-4bdb43a4d00f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:48:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1af5ff2c-9ffd-442e-8fcf-4bdb43a4d00f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:48:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1af5ff2c-9ffd-442e-8fcf-4bdb43a4d00f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:48:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1af5ff2c-9ffd-442e-8fcf-4bdb43a4d00f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:48:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1af5ff2c-9ffd-442e-8fcf-4bdb43a4d00f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bfa604/rate-test-model-bfa604\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bfa604/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:48:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1af5ff2c-9ffd-442e-8fcf-4bdb43a4d00f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T11:48:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1af5ff2c-9ffd-442e-8fcf-4bdb43a4d00f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bc75dd"} {"level":"debug","ts":"2026-07-16T11:48:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1af5ff2c-9ffd-442e-8fcf-4bdb43a4d00f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T11:48:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1af5ff2c-9ffd-442e-8fcf-4bdb43a4d00f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d5eda4b6-0c27-4f61-a38f-ec26578468fc","keyName":"e2e-rate-a-bc75dd","selected_subscription":"e2e-rate-iso-a-bc75dd","selected_subscription_key":"ai-tenant-e2e-shared-a-bfa604/e2e-rate-iso-a-bc75dd@ai-tenant-e2e-shared-a-bfa604/rate-test-model-bfa604","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bfa604","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bc75dd","namespace":"ai-tenant-e2e-shared-a-bfa604","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T11:48:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1af5ff2c-9ffd-442e-8fcf-4bdb43a4d00f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T11:48:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1af5ff2c-9ffd-442e-8fcf-4bdb43a4d00f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T11:48:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9226121-f5e0-4964-8355-e881450f1d1b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:34146","PortSpecifier":{"PortValue":34146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f9226121-f5e0-4964-8355-e881450f1d1b","method":"POST","path":"/ai-tenant-e2e-shared-a-bfa604/rate-test-model-bfa604/v1/completions","host":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T11:48:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9226121-f5e0-4964-8355-e881450f1d1b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:34146","PortSpecifier":{"PortValue":34146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202498,"nanos":945336053},"http":{"id":"f9226121-f5e0-4964-8355-e881450f1d1b","method":"POST","headers":{":authority":"e2e-shared-a-bfa604.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bfa604/rate-test-model-bfa604/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:48:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f9226121-f5e0-4964-8355-e881450f1d1b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hINrLW7ytiN6S8Qx_tyfYoenOapuqOiKb6YLNx9dui3iPFbqBYr4c9zP7hpv"} {"level":"debug","ts":"2026-07-16T11:48:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f9226121-f5e0-4964-8355-e881450f1d1b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bfa604.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-hINrLW7ytiN6S8Qx_tyfYoenOapuqOiKb6YLNx9dui3iPFbqBYr4c9zP7hpv\"}"} {"level":"debug","ts":"2026-07-16T11:48:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f9226121-f5e0-4964-8355-e881450f1d1b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bfa604.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d5eda4b6-0c27-4f61-a38f-ec26578468fc","keyName":"e2e-rate-a-bc75dd","subscription":"e2e-rate-iso-a-bc75dd","tenant":"e2e-shared-a-bfa604","userId":"d5eda4b6-0c27-4f61-a38f-ec26578468fc","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T11:48:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f9226121-f5e0-4964-8355-e881450f1d1b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bfa604.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bfa604/rate-test-model-bfa604\",\"requestedSubscription\":\"e2e-rate-iso-a-bc75dd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T11:48:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f9226121-f5e0-4964-8355-e881450f1d1b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bfa604.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bfa604","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bc75dd","namespace":"ai-tenant-e2e-shared-a-bfa604","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T11:48:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f9226121-f5e0-4964-8355-e881450f1d1b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:48:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9226121-f5e0-4964-8355-e881450f1d1b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:48:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9226121-f5e0-4964-8355-e881450f1d1b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:48:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9226121-f5e0-4964-8355-e881450f1d1b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bfa604/rate-test-model-bfa604\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bfa604/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:48:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9226121-f5e0-4964-8355-e881450f1d1b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:48:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9226121-f5e0-4964-8355-e881450f1d1b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T11:48:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9226121-f5e0-4964-8355-e881450f1d1b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T11:48:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9226121-f5e0-4964-8355-e881450f1d1b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bc75dd"} {"level":"debug","ts":"2026-07-16T11:48:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9226121-f5e0-4964-8355-e881450f1d1b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d5eda4b6-0c27-4f61-a38f-ec26578468fc","keyName":"e2e-rate-a-bc75dd","selected_subscription":"e2e-rate-iso-a-bc75dd","selected_subscription_key":"ai-tenant-e2e-shared-a-bfa604/e2e-rate-iso-a-bc75dd@ai-tenant-e2e-shared-a-bfa604/rate-test-model-bfa604","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bfa604","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bc75dd","namespace":"ai-tenant-e2e-shared-a-bfa604","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T11:48:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9226121-f5e0-4964-8355-e881450f1d1b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T11:48:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9226121-f5e0-4964-8355-e881450f1d1b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T11:48:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06763a9e-0bad-42fa-a726-2e11c71b7505","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:50466","PortSpecifier":{"PortValue":50466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"06763a9e-0bad-42fa-a726-2e11c71b7505","method":"POST","path":"/ai-tenant-e2e-shared-b-f05981/rate-test-model-f05981/v1/completions","host":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T11:48:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06763a9e-0bad-42fa-a726-2e11c71b7505","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:50466","PortSpecifier":{"PortValue":50466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202498,"nanos":975700272},"http":{"id":"06763a9e-0bad-42fa-a726-2e11c71b7505","method":"POST","headers":{":authority":"e2e-shared-b-f05981.apps.88e38fed-adcd-457a-8bbc-f7282b5765a1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-f05981/rate-test-model-f05981/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:48:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"06763a9e-0bad-42fa-a726-2e11c71b7505","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-u6ZKxjMcACd0VMEc_n2MSfAIeJ63bmvSOVuKIevlXN8IV98XPWoPyfqQax8G"} {"level":"debug","ts":"2026-07-16T11:48:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"06763a9e-0bad-42fa-a726-2e11c71b7505","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f05981.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-u6ZKxjMcACd0VMEc_n2MSfAIeJ63bmvSOVuKIevlXN8IV98XPWoPyfqQax8G\"}"} {"level":"debug","ts":"2026-07-16T11:48:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"06763a9e-0bad-42fa-a726-2e11c71b7505","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f05981.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b9a9bcb5-e79a-461a-b8f4-3b119ffff1a3","keyName":"e2e-rate-b-bc75dd","subscription":"e2e-rate-iso-b-bc75dd","tenant":"e2e-shared-b-f05981","userId":"b9a9bcb5-e79a-461a-b8f4-3b119ffff1a3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T11:48:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"06763a9e-0bad-42fa-a726-2e11c71b7505","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-f05981.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-f05981/rate-test-model-f05981\",\"requestedSubscription\":\"e2e-rate-iso-b-bc75dd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T11:48:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"06763a9e-0bad-42fa-a726-2e11c71b7505","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f05981.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f05981","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-bc75dd","namespace":"ai-tenant-e2e-shared-b-f05981","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T11:48:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"06763a9e-0bad-42fa-a726-2e11c71b7505","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T11:48:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06763a9e-0bad-42fa-a726-2e11c71b7505","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:48:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06763a9e-0bad-42fa-a726-2e11c71b7505","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:48:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06763a9e-0bad-42fa-a726-2e11c71b7505","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:48:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06763a9e-0bad-42fa-a726-2e11c71b7505","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f05981/rate-test-model-f05981\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f05981/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T11:48:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06763a9e-0bad-42fa-a726-2e11c71b7505","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T11:48:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06763a9e-0bad-42fa-a726-2e11c71b7505","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-bc75dd"} {"level":"debug","ts":"2026-07-16T11:48:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06763a9e-0bad-42fa-a726-2e11c71b7505","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T11:48:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06763a9e-0bad-42fa-a726-2e11c71b7505","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b9a9bcb5-e79a-461a-b8f4-3b119ffff1a3","keyName":"e2e-rate-b-bc75dd","selected_subscription":"e2e-rate-iso-b-bc75dd","selected_subscription_key":"ai-tenant-e2e-shared-b-f05981/e2e-rate-iso-b-bc75dd@ai-tenant-e2e-shared-b-f05981/rate-test-model-f05981","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f05981","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-bc75dd","namespace":"ai-tenant-e2e-shared-b-f05981","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T11:48:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06763a9e-0bad-42fa-a726-2e11c71b7505","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T11:48:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06763a9e-0bad-42fa-a726-2e11c71b7505","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T11:48:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b810cc4d816a005be97fb79a7548e95cb1c7058dedc3778cb5652d8f584bf275"} {"level":"info","ts":"2026-07-16T11:48:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a451449db9b72f5b6637b1262bc05f8d60539cdc300cbf0d094e6ffdb9b42394"} {"level":"info","ts":"2026-07-16T11:48:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97c31f0ece6ef4d726a74e52671fd96ce742967e76fd5b4473b221b25332f14b"} {"level":"info","ts":"2026-07-16T11:48:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15f2bb7d113ea5da11026651d31f4a155336c7a3d3e137dddbc914815363ed1a"} {"level":"info","ts":"2026-07-16T11:48:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97dc5e1d72a035042d681f091ccec3e7d3d97bae7905cb570ece32bc9f98bba0"} {"level":"info","ts":"2026-07-16T11:48:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c07f3b050daddcf6b5b4d08ad525c6b02388ead403a2537c0b08a9d840a91b0"} {"level":"info","ts":"2026-07-16T11:48:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf14a38135ac786493be1b3347d8fa5ee37f2ed1f5d99a0453d71e68bb709922"} {"level":"info","ts":"2026-07-16T11:48:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/309dd3b9acba2191ec7349f231a09cd1a55dbf990207a1a3cc1c669a65c37037"} {"level":"info","ts":"2026-07-16T11:48:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c84496e0ed9230b97167a5a2c223a30324cc175ed4ea16a6527cb8eb16d8171d"} {"level":"info","ts":"2026-07-16T11:48:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/716aaf72ded709d36b774b0ecf5ced3e48b80e27428a252df35d3dd4a44989ef"} {"level":"info","ts":"2026-07-16T11:48:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73fd3492be26e2f2bc93564599beb72ae4bd2fd54c41e1d3ad5b803d0867628b"} {"level":"info","ts":"2026-07-16T11:48:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34de04e01362a3f27048598152c04994fa5925e9c82954a7e840c0e1addd4934"} {"level":"info","ts":"2026-07-16T11:48:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3492d8a36c1da2d7045e85805b024bf37c2f741a97c76853c8ff41d796226676"} {"level":"info","ts":"2026-07-16T11:48:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93ebda6579e4b3fa7d008d26c35f1b698f2e093e36121e4d90d8bb50661551d6"} {"level":"info","ts":"2026-07-16T11:48:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b96c528cac074a8fd05b21c1f27cf65fd88a71a532b95a10db565395f1888cd"} {"level":"info","ts":"2026-07-16T11:48:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dbbf90060fb00e2697cb8200644b8d364c4531e21664ba7489567540653539aa"} {"level":"info","ts":"2026-07-16T11:48:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d49f6a19c09cc054f24da5d6e95fc66e1330e52cda8cd070418adb49f6dc6c20"} {"level":"info","ts":"2026-07-16T11:48:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33d598ceb2239933f0478cd208772372cd480cc158ade89d05b67953f6c3e0e7"} {"level":"info","ts":"2026-07-16T11:48:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/94001417757bd6301f4a42f28a56b2ba28b9c957e9cac3ab589285b6b827f8fb"} {"level":"info","ts":"2026-07-16T11:48:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/092ad0e27bbde4ca8b0a6baaa2ece7401c379018e1a796d10591850772675a4b"} {"level":"info","ts":"2026-07-16T11:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a71b25e00399935bd9c60371d83293d4a4d9a9e8acec6ef81657e04244b2c20"} {"level":"info","ts":"2026-07-16T11:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1e359e664a09797d6d90cb1caa8aeff1d75d99cda53dbd44e44c5bea88bc8d9"} {"level":"info","ts":"2026-07-16T11:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d1d0e38198c1fa03209d959e88ac4048eafbc8093381324c4fd4d6a3aea81e0"} {"level":"info","ts":"2026-07-16T11:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f5f21f844ba496cb41a119fe895991a22cc4c32f893e7dc7fdf076bb64e8081"}