--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b"} {"level":"debug","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b"} {"level":"debug","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:13:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:13:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:13:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:13:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b"} {"level":"debug","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b"} {"level":"debug","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:13:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:13:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:13:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:13:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b"} {"level":"debug","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b"} {"level":"debug","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:13:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:13:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:13:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:13:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b"} {"level":"debug","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b"} {"level":"debug","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:13:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:13:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:13:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:13:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b"} {"level":"debug","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b"} {"level":"debug","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:13:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:13:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:13:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:13:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b"} {"level":"debug","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b"} {"level":"debug","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:13:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:13:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:13:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:13:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b"} {"level":"debug","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b"} {"level":"debug","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:13:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:13:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:13:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:13:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b"} {"level":"debug","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b"} {"level":"debug","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:13:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:13:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:13:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:13:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b"} {"level":"debug","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b"} {"level":"debug","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:13:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:13:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:13:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:13:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b"} {"level":"debug","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b"} {"level":"debug","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:13:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:13:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:13:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:13:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b"} {"level":"debug","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b"} {"level":"debug","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:13:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:13:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:13:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:13:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b"} {"level":"debug","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b"} {"level":"debug","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:13:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:13:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:13:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:13:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b"} {"level":"debug","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b"} {"level":"debug","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:13:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:13:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:13:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:13:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b"} {"level":"debug","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b"} {"level":"debug","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:13:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:13:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b"} {"level":"info","ts":"2026-07-06T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e14a41a383edd7050cd89813fa2317a1316cec5cf4fbec3c254deb3a73ca041"} {"level":"info","ts":"2026-07-06T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f6d20d2bd3add776ff426790d6f201e5882229d583419131f8dca88242e6336"} {"level":"info","ts":"2026-07-06T18:13:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df4b7be357722dc3d098b4ad2de6442e604cb6057ad530109eb9ac238535d77b"} {"level":"info","ts":"2026-07-06T18:13:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93dedd79d77d1831dbd680e02c01a777dd3b2860c63247154f6141a20b182a8c"} {"level":"debug","ts":"2026-07-06T18:14:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:14:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145"} {"level":"debug","ts":"2026-07-06T18:14:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:14:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145"} {"level":"debug","ts":"2026-07-06T18:14:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:14:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:14:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5a2e197c39248dc2336195f030b43190539d50188563d4aae049a5d85736352","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5a2e197c39248dc2336195f030b43190539d50188563d4aae049a5d85736352","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5a2e197c39248dc2336195f030b43190539d50188563d4aae049a5d85736352","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:14:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145"} {"level":"debug","ts":"2026-07-06T18:14:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5a2e197c39248dc2336195f030b43190539d50188563d4aae049a5d85736352","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5a2e197c39248dc2336195f030b43190539d50188563d4aae049a5d85736352","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5a2e197c39248dc2336195f030b43190539d50188563d4aae049a5d85736352","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:14:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5a2e197c39248dc2336195f030b43190539d50188563d4aae049a5d85736352"} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5a2e197c39248dc2336195f030b43190539d50188563d4aae049a5d85736352","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5a2e197c39248dc2336195f030b43190539d50188563d4aae049a5d85736352"} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bf3c302383f2258efcc10df05a12f6c98c01922db9e5f6bb4cc0a4660c37099","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bf3c302383f2258efcc10df05a12f6c98c01922db9e5f6bb4cc0a4660c37099","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bf3c302383f2258efcc10df05a12f6c98c01922db9e5f6bb4cc0a4660c37099","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bf3c302383f2258efcc10df05a12f6c98c01922db9e5f6bb4cc0a4660c37099","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bf3c302383f2258efcc10df05a12f6c98c01922db9e5f6bb4cc0a4660c37099"} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5a2e197c39248dc2336195f030b43190539d50188563d4aae049a5d85736352","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5a2e197c39248dc2336195f030b43190539d50188563d4aae049a5d85736352"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5a2e197c39248dc2336195f030b43190539d50188563d4aae049a5d85736352","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bf3c302383f2258efcc10df05a12f6c98c01922db9e5f6bb4cc0a4660c37099","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5a2e197c39248dc2336195f030b43190539d50188563d4aae049a5d85736352","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bf3c302383f2258efcc10df05a12f6c98c01922db9e5f6bb4cc0a4660c37099"} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5a2e197c39248dc2336195f030b43190539d50188563d4aae049a5d85736352"} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bf3c302383f2258efcc10df05a12f6c98c01922db9e5f6bb4cc0a4660c37099","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bf3c302383f2258efcc10df05a12f6c98c01922db9e5f6bb4cc0a4660c37099"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bf3c302383f2258efcc10df05a12f6c98c01922db9e5f6bb4cc0a4660c37099","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bf3c302383f2258efcc10df05a12f6c98c01922db9e5f6bb4cc0a4660c37099","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bf3c302383f2258efcc10df05a12f6c98c01922db9e5f6bb4cc0a4660c37099"} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b5ae3fd731d4b4055bc3bb6f60d13007a4fef72ffb5f76a6511e7ee0d8bac55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b5ae3fd731d4b4055bc3bb6f60d13007a4fef72ffb5f76a6511e7ee0d8bac55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b5ae3fd731d4b4055bc3bb6f60d13007a4fef72ffb5f76a6511e7ee0d8bac55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b5ae3fd731d4b4055bc3bb6f60d13007a4fef72ffb5f76a6511e7ee0d8bac55","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b5ae3fd731d4b4055bc3bb6f60d13007a4fef72ffb5f76a6511e7ee0d8bac55"} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b5ae3fd731d4b4055bc3bb6f60d13007a4fef72ffb5f76a6511e7ee0d8bac55","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b5ae3fd731d4b4055bc3bb6f60d13007a4fef72ffb5f76a6511e7ee0d8bac55"} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b5ae3fd731d4b4055bc3bb6f60d13007a4fef72ffb5f76a6511e7ee0d8bac55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b5ae3fd731d4b4055bc3bb6f60d13007a4fef72ffb5f76a6511e7ee0d8bac55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b5ae3fd731d4b4055bc3bb6f60d13007a4fef72ffb5f76a6511e7ee0d8bac55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b5ae3fd731d4b4055bc3bb6f60d13007a4fef72ffb5f76a6511e7ee0d8bac55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"729864b298cb1a6684236f4eba02e5d0d413988c52effb03e26ff051bda40c87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b5ae3fd731d4b4055bc3bb6f60d13007a4fef72ffb5f76a6511e7ee0d8bac55"} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"729864b298cb1a6684236f4eba02e5d0d413988c52effb03e26ff051bda40c87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"729864b298cb1a6684236f4eba02e5d0d413988c52effb03e26ff051bda40c87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"729864b298cb1a6684236f4eba02e5d0d413988c52effb03e26ff051bda40c87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"729864b298cb1a6684236f4eba02e5d0d413988c52effb03e26ff051bda40c87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/729864b298cb1a6684236f4eba02e5d0d413988c52effb03e26ff051bda40c87"} {"level":"error","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"729864b298cb1a6684236f4eba02e5d0d413988c52effb03e26ff051bda40c87","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"729864b298cb1a6684236f4eba02e5d0d413988c52effb03e26ff051bda40c87\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"729864b298cb1a6684236f4eba02e5d0d413988c52effb03e26ff051bda40c87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"729864b298cb1a6684236f4eba02e5d0d413988c52effb03e26ff051bda40c87","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/729864b298cb1a6684236f4eba02e5d0d413988c52effb03e26ff051bda40c87"} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4a1957e6510c54d42f391e1840c81bc5ddbcf03e060d08cca351809afa48968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4a1957e6510c54d42f391e1840c81bc5ddbcf03e060d08cca351809afa48968","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4a1957e6510c54d42f391e1840c81bc5ddbcf03e060d08cca351809afa48968","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4a1957e6510c54d42f391e1840c81bc5ddbcf03e060d08cca351809afa48968","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"729864b298cb1a6684236f4eba02e5d0d413988c52effb03e26ff051bda40c87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["729864b298cb1a6684236f4eba02e5d0d413988c52effb03e26ff051bda40c87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4a1957e6510c54d42f391e1840c81bc5ddbcf03e060d08cca351809afa48968"} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"729864b298cb1a6684236f4eba02e5d0d413988c52effb03e26ff051bda40c87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"729864b298cb1a6684236f4eba02e5d0d413988c52effb03e26ff051bda40c87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4a1957e6510c54d42f391e1840c81bc5ddbcf03e060d08cca351809afa48968","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4a1957e6510c54d42f391e1840c81bc5ddbcf03e060d08cca351809afa48968"} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/729864b298cb1a6684236f4eba02e5d0d413988c52effb03e26ff051bda40c87"} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4a1957e6510c54d42f391e1840c81bc5ddbcf03e060d08cca351809afa48968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4a1957e6510c54d42f391e1840c81bc5ddbcf03e060d08cca351809afa48968"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4a1957e6510c54d42f391e1840c81bc5ddbcf03e060d08cca351809afa48968","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4a1957e6510c54d42f391e1840c81bc5ddbcf03e060d08cca351809afa48968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4a1957e6510c54d42f391e1840c81bc5ddbcf03e060d08cca351809afa48968","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d63607f642ac6b8fc29b484a2ea9984bcdc5d2dd3910dcc5eda21f2c3faea18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4a1957e6510c54d42f391e1840c81bc5ddbcf03e060d08cca351809afa48968"} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d63607f642ac6b8fc29b484a2ea9984bcdc5d2dd3910dcc5eda21f2c3faea18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4a1957e6510c54d42f391e1840c81bc5ddbcf03e060d08cca351809afa48968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4a1957e6510c54d42f391e1840c81bc5ddbcf03e060d08cca351809afa48968"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4a1957e6510c54d42f391e1840c81bc5ddbcf03e060d08cca351809afa48968","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc699e9fd44f4ab171a41c88c6bcc3fba1f7771ef5f7dc55945dd41da91fbf91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d63607f642ac6b8fc29b484a2ea9984bcdc5d2dd3910dcc5eda21f2c3faea18"} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc699e9fd44f4ab171a41c88c6bcc3fba1f7771ef5f7dc55945dd41da91fbf91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d63607f642ac6b8fc29b484a2ea9984bcdc5d2dd3910dcc5eda21f2c3faea18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d63607f642ac6b8fc29b484a2ea9984bcdc5d2dd3910dcc5eda21f2c3faea18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d63607f642ac6b8fc29b484a2ea9984bcdc5d2dd3910dcc5eda21f2c3faea18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4a1957e6510c54d42f391e1840c81bc5ddbcf03e060d08cca351809afa48968","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc699e9fd44f4ab171a41c88c6bcc3fba1f7771ef5f7dc55945dd41da91fbf91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc699e9fd44f4ab171a41c88c6bcc3fba1f7771ef5f7dc55945dd41da91fbf91"} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc699e9fd44f4ab171a41c88c6bcc3fba1f7771ef5f7dc55945dd41da91fbf91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d63607f642ac6b8fc29b484a2ea9984bcdc5d2dd3910dcc5eda21f2c3faea18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc699e9fd44f4ab171a41c88c6bcc3fba1f7771ef5f7dc55945dd41da91fbf91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc699e9fd44f4ab171a41c88c6bcc3fba1f7771ef5f7dc55945dd41da91fbf91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4a1957e6510c54d42f391e1840c81bc5ddbcf03e060d08cca351809afa48968"} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc699e9fd44f4ab171a41c88c6bcc3fba1f7771ef5f7dc55945dd41da91fbf91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc699e9fd44f4ab171a41c88c6bcc3fba1f7771ef5f7dc55945dd41da91fbf91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc699e9fd44f4ab171a41c88c6bcc3fba1f7771ef5f7dc55945dd41da91fbf91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bc699e9fd44f4ab171a41c88c6bcc3fba1f7771ef5f7dc55945dd41da91fbf91","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bc699e9fd44f4ab171a41c88c6bcc3fba1f7771ef5f7dc55945dd41da91fbf91\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc699e9fd44f4ab171a41c88c6bcc3fba1f7771ef5f7dc55945dd41da91fbf91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc699e9fd44f4ab171a41c88c6bcc3fba1f7771ef5f7dc55945dd41da91fbf91","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d63607f642ac6b8fc29b484a2ea9984bcdc5d2dd3910dcc5eda21f2c3faea18"} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6adc24c8bc4f4ac6e8f2aa3d0678eeb0391ba0effa8753890e45b3768904905b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6adc24c8bc4f4ac6e8f2aa3d0678eeb0391ba0effa8753890e45b3768904905b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6adc24c8bc4f4ac6e8f2aa3d0678eeb0391ba0effa8753890e45b3768904905b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6adc24c8bc4f4ac6e8f2aa3d0678eeb0391ba0effa8753890e45b3768904905b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc699e9fd44f4ab171a41c88c6bcc3fba1f7771ef5f7dc55945dd41da91fbf91"} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6adc24c8bc4f4ac6e8f2aa3d0678eeb0391ba0effa8753890e45b3768904905b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6adc24c8bc4f4ac6e8f2aa3d0678eeb0391ba0effa8753890e45b3768904905b"} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6adc24c8bc4f4ac6e8f2aa3d0678eeb0391ba0effa8753890e45b3768904905b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6adc24c8bc4f4ac6e8f2aa3d0678eeb0391ba0effa8753890e45b3768904905b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6adc24c8bc4f4ac6e8f2aa3d0678eeb0391ba0effa8753890e45b3768904905b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6adc24c8bc4f4ac6e8f2aa3d0678eeb0391ba0effa8753890e45b3768904905b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6adc24c8bc4f4ac6e8f2aa3d0678eeb0391ba0effa8753890e45b3768904905b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6adc24c8bc4f4ac6e8f2aa3d0678eeb0391ba0effa8753890e45b3768904905b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6adc24c8bc4f4ac6e8f2aa3d0678eeb0391ba0effa8753890e45b3768904905b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6adc24c8bc4f4ac6e8f2aa3d0678eeb0391ba0effa8753890e45b3768904905b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6adc24c8bc4f4ac6e8f2aa3d0678eeb0391ba0effa8753890e45b3768904905b"} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4dff02adbbe53f4e055bc4b4742ac0dad7b268fb4b8aeb907280eba11e2a6d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4dff02adbbe53f4e055bc4b4742ac0dad7b268fb4b8aeb907280eba11e2a6d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6adc24c8bc4f4ac6e8f2aa3d0678eeb0391ba0effa8753890e45b3768904905b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4dff02adbbe53f4e055bc4b4742ac0dad7b268fb4b8aeb907280eba11e2a6d7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6adc24c8bc4f4ac6e8f2aa3d0678eeb0391ba0effa8753890e45b3768904905b"} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4dff02adbbe53f4e055bc4b4742ac0dad7b268fb4b8aeb907280eba11e2a6d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4dff02adbbe53f4e055bc4b4742ac0dad7b268fb4b8aeb907280eba11e2a6d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4dff02adbbe53f4e055bc4b4742ac0dad7b268fb4b8aeb907280eba11e2a6d7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4dff02adbbe53f4e055bc4b4742ac0dad7b268fb4b8aeb907280eba11e2a6d7"} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4dff02adbbe53f4e055bc4b4742ac0dad7b268fb4b8aeb907280eba11e2a6d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6adc24c8bc4f4ac6e8f2aa3d0678eeb0391ba0effa8753890e45b3768904905b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6adc24c8bc4f4ac6e8f2aa3d0678eeb0391ba0effa8753890e45b3768904905b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6adc24c8bc4f4ac6e8f2aa3d0678eeb0391ba0effa8753890e45b3768904905b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6adc24c8bc4f4ac6e8f2aa3d0678eeb0391ba0effa8753890e45b3768904905b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4dff02adbbe53f4e055bc4b4742ac0dad7b268fb4b8aeb907280eba11e2a6d7"} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6adc24c8bc4f4ac6e8f2aa3d0678eeb0391ba0effa8753890e45b3768904905b"} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4dff02adbbe53f4e055bc4b4742ac0dad7b268fb4b8aeb907280eba11e2a6d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:14:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4dff02adbbe53f4e055bc4b4742ac0dad7b268fb4b8aeb907280eba11e2a6d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4dff02adbbe53f4e055bc4b4742ac0dad7b268fb4b8aeb907280eba11e2a6d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4dff02adbbe53f4e055bc4b4742ac0dad7b268fb4b8aeb907280eba11e2a6d7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:14:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4dff02adbbe53f4e055bc4b4742ac0dad7b268fb4b8aeb907280eba11e2a6d7"} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3d56917f3ddb1356bdf3f031334d03f8464582e374b443b5cd3a2b20bf6590","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3d56917f3ddb1356bdf3f031334d03f8464582e374b443b5cd3a2b20bf6590","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3d56917f3ddb1356bdf3f031334d03f8464582e374b443b5cd3a2b20bf6590","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3d56917f3ddb1356bdf3f031334d03f8464582e374b443b5cd3a2b20bf6590"} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3d56917f3ddb1356bdf3f031334d03f8464582e374b443b5cd3a2b20bf6590","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3d56917f3ddb1356bdf3f031334d03f8464582e374b443b5cd3a2b20bf6590","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc3d56917f3ddb1356bdf3f031334d03f8464582e374b443b5cd3a2b20bf6590"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3d56917f3ddb1356bdf3f031334d03f8464582e374b443b5cd3a2b20bf6590","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3d56917f3ddb1356bdf3f031334d03f8464582e374b443b5cd3a2b20bf6590"} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3d56917f3ddb1356bdf3f031334d03f8464582e374b443b5cd3a2b20bf6590","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fe93785600753d0610d693771287b6f4265ace7d250c8e96191f4f979402ec8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fe93785600753d0610d693771287b6f4265ace7d250c8e96191f4f979402ec8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3d56917f3ddb1356bdf3f031334d03f8464582e374b443b5cd3a2b20bf6590"} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fe93785600753d0610d693771287b6f4265ace7d250c8e96191f4f979402ec8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fe93785600753d0610d693771287b6f4265ace7d250c8e96191f4f979402ec8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fe93785600753d0610d693771287b6f4265ace7d250c8e96191f4f979402ec8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fe93785600753d0610d693771287b6f4265ace7d250c8e96191f4f979402ec8"} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fe93785600753d0610d693771287b6f4265ace7d250c8e96191f4f979402ec8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fe93785600753d0610d693771287b6f4265ace7d250c8e96191f4f979402ec8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fe93785600753d0610d693771287b6f4265ace7d250c8e96191f4f979402ec8"} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fe93785600753d0610d693771287b6f4265ace7d250c8e96191f4f979402ec8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2fe93785600753d0610d693771287b6f4265ace7d250c8e96191f4f979402ec8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fe93785600753d0610d693771287b6f4265ace7d250c8e96191f4f979402ec8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fe93785600753d0610d693771287b6f4265ace7d250c8e96191f4f979402ec8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fe93785600753d0610d693771287b6f4265ace7d250c8e96191f4f979402ec8"} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"671856ca9175d3dac06f078fc4ca2c853ae4308a64c3f38aa01605cfcefe78df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"671856ca9175d3dac06f078fc4ca2c853ae4308a64c3f38aa01605cfcefe78df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"671856ca9175d3dac06f078fc4ca2c853ae4308a64c3f38aa01605cfcefe78df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/671856ca9175d3dac06f078fc4ca2c853ae4308a64c3f38aa01605cfcefe78df"} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"671856ca9175d3dac06f078fc4ca2c853ae4308a64c3f38aa01605cfcefe78df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"671856ca9175d3dac06f078fc4ca2c853ae4308a64c3f38aa01605cfcefe78df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["671856ca9175d3dac06f078fc4ca2c853ae4308a64c3f38aa01605cfcefe78df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"671856ca9175d3dac06f078fc4ca2c853ae4308a64c3f38aa01605cfcefe78df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"671856ca9175d3dac06f078fc4ca2c853ae4308a64c3f38aa01605cfcefe78df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/671856ca9175d3dac06f078fc4ca2c853ae4308a64c3f38aa01605cfcefe78df"} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"671856ca9175d3dac06f078fc4ca2c853ae4308a64c3f38aa01605cfcefe78df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"671856ca9175d3dac06f078fc4ca2c853ae4308a64c3f38aa01605cfcefe78df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["671856ca9175d3dac06f078fc4ca2c853ae4308a64c3f38aa01605cfcefe78df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"671856ca9175d3dac06f078fc4ca2c853ae4308a64c3f38aa01605cfcefe78df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35bb1434ce73912916787eb86ee1c4a3e969f2a8c29e0142a054a914783d3506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/671856ca9175d3dac06f078fc4ca2c853ae4308a64c3f38aa01605cfcefe78df"} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35bb1434ce73912916787eb86ee1c4a3e969f2a8c29e0142a054a914783d3506","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"671856ca9175d3dac06f078fc4ca2c853ae4308a64c3f38aa01605cfcefe78df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35bb1434ce73912916787eb86ee1c4a3e969f2a8c29e0142a054a914783d3506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35bb1434ce73912916787eb86ee1c4a3e969f2a8c29e0142a054a914783d3506"} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35bb1434ce73912916787eb86ee1c4a3e969f2a8c29e0142a054a914783d3506","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35bb1434ce73912916787eb86ee1c4a3e969f2a8c29e0142a054a914783d3506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35bb1434ce73912916787eb86ee1c4a3e969f2a8c29e0142a054a914783d3506"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35bb1434ce73912916787eb86ee1c4a3e969f2a8c29e0142a054a914783d3506","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35bb1434ce73912916787eb86ee1c4a3e969f2a8c29e0142a054a914783d3506","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f353962bb1d69ec2495f9e9cb592801cc8757b6b131cd3a57dc6c869f05d507","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/671856ca9175d3dac06f078fc4ca2c853ae4308a64c3f38aa01605cfcefe78df"} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f353962bb1d69ec2495f9e9cb592801cc8757b6b131cd3a57dc6c869f05d507","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f353962bb1d69ec2495f9e9cb592801cc8757b6b131cd3a57dc6c869f05d507","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f353962bb1d69ec2495f9e9cb592801cc8757b6b131cd3a57dc6c869f05d507","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35bb1434ce73912916787eb86ee1c4a3e969f2a8c29e0142a054a914783d3506"} {"level":"debug","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f353962bb1d69ec2495f9e9cb592801cc8757b6b131cd3a57dc6c869f05d507","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"} {"level":"info","ts":"2026-07-06T18:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f353962bb1d69ec2495f9e9cb592801cc8757b6b131cd3a57dc6c869f05d507"} {"level":"debug","ts":"2026-07-06T18:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f353962bb1d69ec2495f9e9cb592801cc8757b6b131cd3a57dc6c869f05d507","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:14:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:14:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f353962bb1d69ec2495f9e9cb592801cc8757b6b131cd3a57dc6c869f05d507"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f353962bb1d69ec2495f9e9cb592801cc8757b6b131cd3a57dc6c869f05d507","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f353962bb1d69ec2495f9e9cb592801cc8757b6b131cd3a57dc6c869f05d507","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5827d1dcb1ad29c601a092cc0079ff7e5b1437e772a0d1eff9e3c7ecc7474beb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5827d1dcb1ad29c601a092cc0079ff7e5b1437e772a0d1eff9e3c7ecc7474beb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5827d1dcb1ad29c601a092cc0079ff7e5b1437e772a0d1eff9e3c7ecc7474beb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be27e5ac53aa02d80df7385c73cdd0731381351b21faa8133a45d1f679080feb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f353962bb1d69ec2495f9e9cb592801cc8757b6b131cd3a57dc6c869f05d507"} {"level":"info","ts":"2026-07-06T18:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be27e5ac53aa02d80df7385c73cdd0731381351b21faa8133a45d1f679080feb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5827d1dcb1ad29c601a092cc0079ff7e5b1437e772a0d1eff9e3c7ecc7474beb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5827d1dcb1ad29c601a092cc0079ff7e5b1437e772a0d1eff9e3c7ecc7474beb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be27e5ac53aa02d80df7385c73cdd0731381351b21faa8133a45d1f679080feb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5827d1dcb1ad29c601a092cc0079ff7e5b1437e772a0d1eff9e3c7ecc7474beb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5827d1dcb1ad29c601a092cc0079ff7e5b1437e772a0d1eff9e3c7ecc7474beb"} {"level":"debug","ts":"2026-07-06T18:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be27e5ac53aa02d80df7385c73cdd0731381351b21faa8133a45d1f679080feb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be27e5ac53aa02d80df7385c73cdd0731381351b21faa8133a45d1f679080feb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5827d1dcb1ad29c601a092cc0079ff7e5b1437e772a0d1eff9e3c7ecc7474beb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:14:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:14:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5827d1dcb1ad29c601a092cc0079ff7e5b1437e772a0d1eff9e3c7ecc7474beb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be27e5ac53aa02d80df7385c73cdd0731381351b21faa8133a45d1f679080feb"} {"level":"info","ts":"2026-07-06T18:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5827d1dcb1ad29c601a092cc0079ff7e5b1437e772a0d1eff9e3c7ecc7474beb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be27e5ac53aa02d80df7385c73cdd0731381351b21faa8133a45d1f679080feb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:14:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:14:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be27e5ac53aa02d80df7385c73cdd0731381351b21faa8133a45d1f679080feb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5827d1dcb1ad29c601a092cc0079ff7e5b1437e772a0d1eff9e3c7ecc7474beb"} {"level":"info","ts":"2026-07-06T18:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be27e5ac53aa02d80df7385c73cdd0731381351b21faa8133a45d1f679080feb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5827d1dcb1ad29c601a092cc0079ff7e5b1437e772a0d1eff9e3c7ecc7474beb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d8a56df7f8b8c70e7d2bff4d02c9234d18610fc2ecf3f9e36f00d8ec1f10d97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be27e5ac53aa02d80df7385c73cdd0731381351b21faa8133a45d1f679080feb"} {"level":"info","ts":"2026-07-06T18:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d8a56df7f8b8c70e7d2bff4d02c9234d18610fc2ecf3f9e36f00d8ec1f10d97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9225165939445daeb6e6d19a2ba0c2e1cbb0bc8b145d318ba6892df2193b8f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:14:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:14:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d8a56df7f8b8c70e7d2bff4d02c9234d18610fc2ecf3f9e36f00d8ec1f10d97"} {"level":"info","ts":"2026-07-06T18:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5827d1dcb1ad29c601a092cc0079ff7e5b1437e772a0d1eff9e3c7ecc7474beb"} {"level":"info","ts":"2026-07-06T18:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9225165939445daeb6e6d19a2ba0c2e1cbb0bc8b145d318ba6892df2193b8f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be27e5ac53aa02d80df7385c73cdd0731381351b21faa8133a45d1f679080feb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d8a56df7f8b8c70e7d2bff4d02c9234d18610fc2ecf3f9e36f00d8ec1f10d97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:14:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:14:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d8a56df7f8b8c70e7d2bff4d02c9234d18610fc2ecf3f9e36f00d8ec1f10d97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9225165939445daeb6e6d19a2ba0c2e1cbb0bc8b145d318ba6892df2193b8f3"} {"level":"info","ts":"2026-07-06T18:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be27e5ac53aa02d80df7385c73cdd0731381351b21faa8133a45d1f679080feb"} {"level":"info","ts":"2026-07-06T18:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d8a56df7f8b8c70e7d2bff4d02c9234d18610fc2ecf3f9e36f00d8ec1f10d97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9225165939445daeb6e6d19a2ba0c2e1cbb0bc8b145d318ba6892df2193b8f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:14:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:14:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9225165939445daeb6e6d19a2ba0c2e1cbb0bc8b145d318ba6892df2193b8f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d8a56df7f8b8c70e7d2bff4d02c9234d18610fc2ecf3f9e36f00d8ec1f10d97"} {"level":"info","ts":"2026-07-06T18:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9225165939445daeb6e6d19a2ba0c2e1cbb0bc8b145d318ba6892df2193b8f3"} {"level":"info","ts":"2026-07-06T18:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d8a56df7f8b8c70e7d2bff4d02c9234d18610fc2ecf3f9e36f00d8ec1f10d97"} {"level":"info","ts":"2026-07-06T18:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9225165939445daeb6e6d19a2ba0c2e1cbb0bc8b145d318ba6892df2193b8f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d8a56df7f8b8c70e7d2bff4d02c9234d18610fc2ecf3f9e36f00d8ec1f10d97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9225165939445daeb6e6d19a2ba0c2e1cbb0bc8b145d318ba6892df2193b8f3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9225165939445daeb6e6d19a2ba0c2e1cbb0bc8b145d318ba6892df2193b8f3"} {"level":"info","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d38f3a14-d8ae-46ee-8fc0-e87a200abd68","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:45514","PortSpecifier":{"PortValue":45514}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d38f3a14-d8ae-46ee-8fc0-e87a200abd68","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d38f3a14-d8ae-46ee-8fc0-e87a200abd68","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:45514","PortSpecifier":{"PortValue":45514}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783361679,"nanos":648431477},"http":{"id":"d38f3a14-d8ae-46ee-8fc0-e87a200abd68","method":"POST","headers":{":authority":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d38f3a14-d8ae-46ee-8fc0-e87a200abd68","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d38f3a14-d8ae-46ee-8fc0-e87a200abd68","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"]}} {"level":"debug","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d38f3a14-d8ae-46ee-8fc0-e87a200abd68","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d38f3a14-d8ae-46ee-8fc0-e87a200abd68","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d38f3a14-d8ae-46ee-8fc0-e87a200abd68","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d38f3a14-d8ae-46ee-8fc0-e87a200abd68","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3b0a18/auth-test-model-3b0a18\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d38f3a14-d8ae-46ee-8fc0-e87a200abd68","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d38f3a14-d8ae-46ee-8fc0-e87a200abd68","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d38f3a14-d8ae-46ee-8fc0-e87a200abd68","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d38f3a14-d8ae-46ee-8fc0-e87a200abd68","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d38f3a14-d8ae-46ee-8fc0-e87a200abd68","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d28c7fc-1154-4648-be5b-ea7f1f6570ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46900","PortSpecifier":{"PortValue":46900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0d28c7fc-1154-4648-be5b-ea7f1f6570ee","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d28c7fc-1154-4648-be5b-ea7f1f6570ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46900","PortSpecifier":{"PortValue":46900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783361679,"nanos":711327999},"http":{"id":"0d28c7fc-1154-4648-be5b-ea7f1f6570ee","method":"POST","headers":{":authority":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0d28c7fc-1154-4648-be5b-ea7f1f6570ee","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0d28c7fc-1154-4648-be5b-ea7f1f6570ee","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"]}} {"level":"debug","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0d28c7fc-1154-4648-be5b-ea7f1f6570ee","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d28c7fc-1154-4648-be5b-ea7f1f6570ee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d28c7fc-1154-4648-be5b-ea7f1f6570ee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d28c7fc-1154-4648-be5b-ea7f1f6570ee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a0e97d/auth-test-model-a0e97d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0d28c7fc-1154-4648-be5b-ea7f1f6570ee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d28c7fc-1154-4648-be5b-ea7f1f6570ee","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d28c7fc-1154-4648-be5b-ea7f1f6570ee","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d28c7fc-1154-4648-be5b-ea7f1f6570ee","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d28c7fc-1154-4648-be5b-ea7f1f6570ee","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e631ad4e-1da7-4e6f-8dde-d38487e5796b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:45526","PortSpecifier":{"PortValue":45526}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e631ad4e-1da7-4e6f-8dde-d38487e5796b","method":"GET","path":"/maas-api/v1/api-keys/9e2b29da-65b3-42a3-8b2b-07b3b317dd0f","host":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e631ad4e-1da7-4e6f-8dde-d38487e5796b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:45526","PortSpecifier":{"PortValue":45526}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783361679,"nanos":798724763},"http":{"id":"e631ad4e-1da7-4e6f-8dde-d38487e5796b","method":"GET","headers":{":authority":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9e2b29da-65b3-42a3-8b2b-07b3b317dd0f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e631ad4e-1da7-4e6f-8dde-d38487e5796b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e631ad4e-1da7-4e6f-8dde-d38487e5796b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"]}} {"level":"debug","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e631ad4e-1da7-4e6f-8dde-d38487e5796b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9e2b29da-65b3-42a3-8b2b-07b3b317dd0f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e631ad4e-1da7-4e6f-8dde-d38487e5796b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e631ad4e-1da7-4e6f-8dde-d38487e5796b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e631ad4e-1da7-4e6f-8dde-d38487e5796b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3b0a18/auth-test-model-3b0a18\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e631ad4e-1da7-4e6f-8dde-d38487e5796b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e631ad4e-1da7-4e6f-8dde-d38487e5796b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e631ad4e-1da7-4e6f-8dde-d38487e5796b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e631ad4e-1da7-4e6f-8dde-d38487e5796b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e631ad4e-1da7-4e6f-8dde-d38487e5796b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f48efc5b-3741-4e13-8a19-2154f19bd3ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46908","PortSpecifier":{"PortValue":46908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f48efc5b-3741-4e13-8a19-2154f19bd3ea","method":"GET","path":"/maas-api/v1/api-keys/a82a6707-bafe-4c35-950f-6e1168a22e8d","host":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f48efc5b-3741-4e13-8a19-2154f19bd3ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46908","PortSpecifier":{"PortValue":46908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783361679,"nanos":838180353},"http":{"id":"f48efc5b-3741-4e13-8a19-2154f19bd3ea","method":"GET","headers":{":authority":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a82a6707-bafe-4c35-950f-6e1168a22e8d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f48efc5b-3741-4e13-8a19-2154f19bd3ea","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f48efc5b-3741-4e13-8a19-2154f19bd3ea","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"]}} {"level":"debug","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f48efc5b-3741-4e13-8a19-2154f19bd3ea","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a82a6707-bafe-4c35-950f-6e1168a22e8d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f48efc5b-3741-4e13-8a19-2154f19bd3ea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f48efc5b-3741-4e13-8a19-2154f19bd3ea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f48efc5b-3741-4e13-8a19-2154f19bd3ea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a0e97d/auth-test-model-a0e97d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f48efc5b-3741-4e13-8a19-2154f19bd3ea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f48efc5b-3741-4e13-8a19-2154f19bd3ea","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f48efc5b-3741-4e13-8a19-2154f19bd3ea","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f48efc5b-3741-4e13-8a19-2154f19bd3ea","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:14:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f48efc5b-3741-4e13-8a19-2154f19bd3ea","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:15:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33e8c7c3-dadc-4ec5-9b00-3c93b49d3998","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:50130","PortSpecifier":{"PortValue":50130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"33e8c7c3-dadc-4ec5-9b00-3c93b49d3998","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:15:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33e8c7c3-dadc-4ec5-9b00-3c93b49d3998","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:50130","PortSpecifier":{"PortValue":50130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783361707,"nanos":746587367},"http":{"id":"33e8c7c3-dadc-4ec5-9b00-3c93b49d3998","method":"POST","headers":{":authority":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:15:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"33e8c7c3-dadc-4ec5-9b00-3c93b49d3998","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:15:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"33e8c7c3-dadc-4ec5-9b00-3c93b49d3998","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"]}} {"level":"debug","ts":"2026-07-06T18:15:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"33e8c7c3-dadc-4ec5-9b00-3c93b49d3998","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:15:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33e8c7c3-dadc-4ec5-9b00-3c93b49d3998","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:15:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33e8c7c3-dadc-4ec5-9b00-3c93b49d3998","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:15:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33e8c7c3-dadc-4ec5-9b00-3c93b49d3998","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3b0a18/auth-test-model-3b0a18\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:15:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"33e8c7c3-dadc-4ec5-9b00-3c93b49d3998","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:15:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33e8c7c3-dadc-4ec5-9b00-3c93b49d3998","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:15:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33e8c7c3-dadc-4ec5-9b00-3c93b49d3998","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:15:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33e8c7c3-dadc-4ec5-9b00-3c93b49d3998","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:15:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33e8c7c3-dadc-4ec5-9b00-3c93b49d3998","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:15:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34532596-27f8-4a4f-bbab-413d0d625260","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:40828","PortSpecifier":{"PortValue":40828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"34532596-27f8-4a4f-bbab-413d0d625260","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:15:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34532596-27f8-4a4f-bbab-413d0d625260","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:40828","PortSpecifier":{"PortValue":40828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783361707,"nanos":790414001},"http":{"id":"34532596-27f8-4a4f-bbab-413d0d625260","method":"POST","headers":{":authority":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:15:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"34532596-27f8-4a4f-bbab-413d0d625260","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:15:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"34532596-27f8-4a4f-bbab-413d0d625260","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"]}} {"level":"debug","ts":"2026-07-06T18:15:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"34532596-27f8-4a4f-bbab-413d0d625260","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:15:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34532596-27f8-4a4f-bbab-413d0d625260","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:15:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34532596-27f8-4a4f-bbab-413d0d625260","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:15:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34532596-27f8-4a4f-bbab-413d0d625260","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a0e97d/auth-test-model-a0e97d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:15:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"34532596-27f8-4a4f-bbab-413d0d625260","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:15:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34532596-27f8-4a4f-bbab-413d0d625260","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:15:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34532596-27f8-4a4f-bbab-413d0d625260","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:15:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34532596-27f8-4a4f-bbab-413d0d625260","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:15:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34532596-27f8-4a4f-bbab-413d0d625260","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:15:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d84b0acd-0946-4d50-b4e1-f2caebd2fd55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:40830","PortSpecifier":{"PortValue":40830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d84b0acd-0946-4d50-b4e1-f2caebd2fd55","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:15:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d84b0acd-0946-4d50-b4e1-f2caebd2fd55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:40830","PortSpecifier":{"PortValue":40830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783361707,"nanos":841955583},"http":{"id":"d84b0acd-0946-4d50-b4e1-f2caebd2fd55","method":"GET","headers":{":authority":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:15:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d84b0acd-0946-4d50-b4e1-f2caebd2fd55","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1UqMbXF0LOM1OptdC_3MnFvX4TobJEzZdtQBYiiXMbzrajExP71XypwyhaPhE"} {"level":"debug","ts":"2026-07-06T18:15:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d84b0acd-0946-4d50-b4e1-f2caebd2fd55","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-a0e97d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1UqMbXF0LOM1OptdC_3MnFvX4TobJEzZdtQBYiiXMbzrajExP71XypwyhaPhE\"}"} {"level":"debug","ts":"2026-07-06T18:15:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d84b0acd-0946-4d50-b4e1-f2caebd2fd55","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a0e97d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-06T18:15:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d84b0acd-0946-4d50-b4e1-f2caebd2fd55","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:15:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"d84b0acd-0946-4d50-b4e1-f2caebd2fd55","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-06T18:15:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d84b0acd-0946-4d50-b4e1-f2caebd2fd55","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-06T18:15:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d84b0acd-0946-4d50-b4e1-f2caebd2fd55","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-06T18:15:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5de8e989-7fde-4816-86e1-314ca8e42dc6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37598","PortSpecifier":{"PortValue":37598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5de8e989-7fde-4816-86e1-314ca8e42dc6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:15:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5de8e989-7fde-4816-86e1-314ca8e42dc6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37598","PortSpecifier":{"PortValue":37598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783361722,"nanos":877141883},"http":{"id":"5de8e989-7fde-4816-86e1-314ca8e42dc6","method":"POST","headers":{":authority":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:15:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5de8e989-7fde-4816-86e1-314ca8e42dc6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:15:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5de8e989-7fde-4816-86e1-314ca8e42dc6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"]}} {"level":"debug","ts":"2026-07-06T18:15:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5de8e989-7fde-4816-86e1-314ca8e42dc6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:15:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5de8e989-7fde-4816-86e1-314ca8e42dc6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:15:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5de8e989-7fde-4816-86e1-314ca8e42dc6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:15:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5de8e989-7fde-4816-86e1-314ca8e42dc6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3b0a18/auth-test-model-3b0a18\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:15:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5de8e989-7fde-4816-86e1-314ca8e42dc6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:15:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5de8e989-7fde-4816-86e1-314ca8e42dc6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:15:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5de8e989-7fde-4816-86e1-314ca8e42dc6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T18:15:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5de8e989-7fde-4816-86e1-314ca8e42dc6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:15:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5de8e989-7fde-4816-86e1-314ca8e42dc6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:15:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d718a2e7-30f0-40cd-b183-e96107eff610","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39504","PortSpecifier":{"PortValue":39504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d718a2e7-30f0-40cd-b183-e96107eff610","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:15:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d718a2e7-30f0-40cd-b183-e96107eff610","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39504","PortSpecifier":{"PortValue":39504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783361722,"nanos":918723001},"http":{"id":"d718a2e7-30f0-40cd-b183-e96107eff610","method":"POST","headers":{":authority":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:15:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d718a2e7-30f0-40cd-b183-e96107eff610","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:15:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d718a2e7-30f0-40cd-b183-e96107eff610","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"]}} {"level":"debug","ts":"2026-07-06T18:15:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d718a2e7-30f0-40cd-b183-e96107eff610","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:15:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d718a2e7-30f0-40cd-b183-e96107eff610","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:15:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d718a2e7-30f0-40cd-b183-e96107eff610","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:15:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d718a2e7-30f0-40cd-b183-e96107eff610","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a0e97d/auth-test-model-a0e97d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:15:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d718a2e7-30f0-40cd-b183-e96107eff610","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:15:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d718a2e7-30f0-40cd-b183-e96107eff610","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:15:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d718a2e7-30f0-40cd-b183-e96107eff610","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:15:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d718a2e7-30f0-40cd-b183-e96107eff610","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:15:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d718a2e7-30f0-40cd-b183-e96107eff610","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:15:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f15388f6-3c58-499e-b5b1-716e87444730","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37608","PortSpecifier":{"PortValue":37608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f15388f6-3c58-499e-b5b1-716e87444730","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:15:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f15388f6-3c58-499e-b5b1-716e87444730","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37608","PortSpecifier":{"PortValue":37608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783361722,"nanos":962166187},"http":{"id":"f15388f6-3c58-499e-b5b1-716e87444730","method":"POST","headers":{":authority":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:15:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f15388f6-3c58-499e-b5b1-716e87444730","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:15:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f15388f6-3c58-499e-b5b1-716e87444730","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"]}} {"level":"debug","ts":"2026-07-06T18:15:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f15388f6-3c58-499e-b5b1-716e87444730","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:15:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f15388f6-3c58-499e-b5b1-716e87444730","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:15:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f15388f6-3c58-499e-b5b1-716e87444730","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:15:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f15388f6-3c58-499e-b5b1-716e87444730","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3b0a18/auth-test-model-3b0a18\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:15:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f15388f6-3c58-499e-b5b1-716e87444730","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:15:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f15388f6-3c58-499e-b5b1-716e87444730","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:15:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f15388f6-3c58-499e-b5b1-716e87444730","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:15:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f15388f6-3c58-499e-b5b1-716e87444730","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:15:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f15388f6-3c58-499e-b5b1-716e87444730","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:15:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce4bdfab-e8ff-4d9d-88cd-b29e806f8fc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39514","PortSpecifier":{"PortValue":39514}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ce4bdfab-e8ff-4d9d-88cd-b29e806f8fc0","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:15:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce4bdfab-e8ff-4d9d-88cd-b29e806f8fc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39514","PortSpecifier":{"PortValue":39514}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783361722,"nanos":999313665},"http":{"id":"ce4bdfab-e8ff-4d9d-88cd-b29e806f8fc0","method":"POST","headers":{":authority":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:15:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ce4bdfab-e8ff-4d9d-88cd-b29e806f8fc0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:15:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ce4bdfab-e8ff-4d9d-88cd-b29e806f8fc0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"]}} {"level":"debug","ts":"2026-07-06T18:15:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ce4bdfab-e8ff-4d9d-88cd-b29e806f8fc0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:15:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce4bdfab-e8ff-4d9d-88cd-b29e806f8fc0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:15:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce4bdfab-e8ff-4d9d-88cd-b29e806f8fc0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:15:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce4bdfab-e8ff-4d9d-88cd-b29e806f8fc0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a0e97d/auth-test-model-a0e97d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:15:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ce4bdfab-e8ff-4d9d-88cd-b29e806f8fc0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:15:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce4bdfab-e8ff-4d9d-88cd-b29e806f8fc0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:15:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce4bdfab-e8ff-4d9d-88cd-b29e806f8fc0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T18:15:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce4bdfab-e8ff-4d9d-88cd-b29e806f8fc0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:15:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce4bdfab-e8ff-4d9d-88cd-b29e806f8fc0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba2070d9-92f4-429b-bcd9-94e88ac117ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:50220","PortSpecifier":{"PortValue":50220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ba2070d9-92f4-429b-bcd9-94e88ac117ee","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba2070d9-92f4-429b-bcd9-94e88ac117ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:50220","PortSpecifier":{"PortValue":50220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783361738,"nanos":28117237},"http":{"id":"ba2070d9-92f4-429b-bcd9-94e88ac117ee","method":"POST","headers":{":authority":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ba2070d9-92f4-429b-bcd9-94e88ac117ee","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ba2070d9-92f4-429b-bcd9-94e88ac117ee","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"]}} {"level":"debug","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ba2070d9-92f4-429b-bcd9-94e88ac117ee","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba2070d9-92f4-429b-bcd9-94e88ac117ee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba2070d9-92f4-429b-bcd9-94e88ac117ee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba2070d9-92f4-429b-bcd9-94e88ac117ee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3b0a18/auth-test-model-3b0a18\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ba2070d9-92f4-429b-bcd9-94e88ac117ee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba2070d9-92f4-429b-bcd9-94e88ac117ee","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba2070d9-92f4-429b-bcd9-94e88ac117ee","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba2070d9-92f4-429b-bcd9-94e88ac117ee","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba2070d9-92f4-429b-bcd9-94e88ac117ee","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5cfd7ce-79a6-4923-939c-876e8fdd8c8f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:36990","PortSpecifier":{"PortValue":36990}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b5cfd7ce-79a6-4923-939c-876e8fdd8c8f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5cfd7ce-79a6-4923-939c-876e8fdd8c8f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:36990","PortSpecifier":{"PortValue":36990}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783361738,"nanos":71354300},"http":{"id":"b5cfd7ce-79a6-4923-939c-876e8fdd8c8f","method":"POST","headers":{":authority":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b5cfd7ce-79a6-4923-939c-876e8fdd8c8f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b5cfd7ce-79a6-4923-939c-876e8fdd8c8f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"]}} {"level":"debug","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b5cfd7ce-79a6-4923-939c-876e8fdd8c8f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5cfd7ce-79a6-4923-939c-876e8fdd8c8f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5cfd7ce-79a6-4923-939c-876e8fdd8c8f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5cfd7ce-79a6-4923-939c-876e8fdd8c8f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a0e97d/auth-test-model-a0e97d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b5cfd7ce-79a6-4923-939c-876e8fdd8c8f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5cfd7ce-79a6-4923-939c-876e8fdd8c8f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5cfd7ce-79a6-4923-939c-876e8fdd8c8f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5cfd7ce-79a6-4923-939c-876e8fdd8c8f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5cfd7ce-79a6-4923-939c-876e8fdd8c8f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce0ad927-4198-4406-8b46-28f12ff16657","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37006","PortSpecifier":{"PortValue":37006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ce0ad927-4198-4406-8b46-28f12ff16657","method":"GET","path":"/maas-api/v1/api-keys/bec5d62b-3f12-40f4-b9ca-ed24532bc742","host":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce0ad927-4198-4406-8b46-28f12ff16657","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37006","PortSpecifier":{"PortValue":37006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783361738,"nanos":137537862},"http":{"id":"ce0ad927-4198-4406-8b46-28f12ff16657","method":"GET","headers":{":authority":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/bec5d62b-3f12-40f4-b9ca-ed24532bc742",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ce0ad927-4198-4406-8b46-28f12ff16657","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ce0ad927-4198-4406-8b46-28f12ff16657","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"]}} {"level":"debug","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ce0ad927-4198-4406-8b46-28f12ff16657","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/bec5d62b-3f12-40f4-b9ca-ed24532bc742",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce0ad927-4198-4406-8b46-28f12ff16657","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce0ad927-4198-4406-8b46-28f12ff16657","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce0ad927-4198-4406-8b46-28f12ff16657","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a0e97d/auth-test-model-a0e97d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ce0ad927-4198-4406-8b46-28f12ff16657","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce0ad927-4198-4406-8b46-28f12ff16657","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce0ad927-4198-4406-8b46-28f12ff16657","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce0ad927-4198-4406-8b46-28f12ff16657","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce0ad927-4198-4406-8b46-28f12ff16657","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3dabc80b-d69c-4c60-bcf7-24ab49330ce1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:50226","PortSpecifier":{"PortValue":50226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3dabc80b-d69c-4c60-bcf7-24ab49330ce1","method":"GET","path":"/maas-api/v1/api-keys/bec5d62b-3f12-40f4-b9ca-ed24532bc742","host":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3dabc80b-d69c-4c60-bcf7-24ab49330ce1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:50226","PortSpecifier":{"PortValue":50226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783361738,"nanos":173792485},"http":{"id":"3dabc80b-d69c-4c60-bcf7-24ab49330ce1","method":"GET","headers":{":authority":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/bec5d62b-3f12-40f4-b9ca-ed24532bc742",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3dabc80b-d69c-4c60-bcf7-24ab49330ce1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3dabc80b-d69c-4c60-bcf7-24ab49330ce1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"]}} {"level":"debug","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3dabc80b-d69c-4c60-bcf7-24ab49330ce1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/bec5d62b-3f12-40f4-b9ca-ed24532bc742",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3dabc80b-d69c-4c60-bcf7-24ab49330ce1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3dabc80b-d69c-4c60-bcf7-24ab49330ce1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3dabc80b-d69c-4c60-bcf7-24ab49330ce1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3b0a18/auth-test-model-3b0a18\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3dabc80b-d69c-4c60-bcf7-24ab49330ce1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3dabc80b-d69c-4c60-bcf7-24ab49330ce1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3dabc80b-d69c-4c60-bcf7-24ab49330ce1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3dabc80b-d69c-4c60-bcf7-24ab49330ce1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:15:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3dabc80b-d69c-4c60-bcf7-24ab49330ce1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:15:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28056c78-450e-4ba3-99fe-0827e360de8e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:48760","PortSpecifier":{"PortValue":48760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"28056c78-450e-4ba3-99fe-0827e360de8e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:15:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28056c78-450e-4ba3-99fe-0827e360de8e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:48760","PortSpecifier":{"PortValue":48760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783361755,"nanos":299493072},"http":{"id":"28056c78-450e-4ba3-99fe-0827e360de8e","method":"POST","headers":{":authority":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:15:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"28056c78-450e-4ba3-99fe-0827e360de8e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:15:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"28056c78-450e-4ba3-99fe-0827e360de8e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"]}} {"level":"debug","ts":"2026-07-06T18:15:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"28056c78-450e-4ba3-99fe-0827e360de8e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:15:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28056c78-450e-4ba3-99fe-0827e360de8e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:15:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28056c78-450e-4ba3-99fe-0827e360de8e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:15:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28056c78-450e-4ba3-99fe-0827e360de8e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3b0a18/auth-test-model-3b0a18\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:15:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"28056c78-450e-4ba3-99fe-0827e360de8e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:15:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28056c78-450e-4ba3-99fe-0827e360de8e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:15:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28056c78-450e-4ba3-99fe-0827e360de8e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T18:15:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28056c78-450e-4ba3-99fe-0827e360de8e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:15:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28056c78-450e-4ba3-99fe-0827e360de8e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:15:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39af27ee-d3a9-4bd9-ab29-18b508ca8a8b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:49928","PortSpecifier":{"PortValue":49928}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"39af27ee-d3a9-4bd9-ab29-18b508ca8a8b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:15:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39af27ee-d3a9-4bd9-ab29-18b508ca8a8b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:49928","PortSpecifier":{"PortValue":49928}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783361755,"nanos":336130892},"http":{"id":"39af27ee-d3a9-4bd9-ab29-18b508ca8a8b","method":"POST","headers":{":authority":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:15:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"39af27ee-d3a9-4bd9-ab29-18b508ca8a8b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:15:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"39af27ee-d3a9-4bd9-ab29-18b508ca8a8b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"]}} {"level":"debug","ts":"2026-07-06T18:15:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"39af27ee-d3a9-4bd9-ab29-18b508ca8a8b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:15:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39af27ee-d3a9-4bd9-ab29-18b508ca8a8b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:15:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39af27ee-d3a9-4bd9-ab29-18b508ca8a8b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:15:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39af27ee-d3a9-4bd9-ab29-18b508ca8a8b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a0e97d/auth-test-model-a0e97d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:15:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"39af27ee-d3a9-4bd9-ab29-18b508ca8a8b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:15:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39af27ee-d3a9-4bd9-ab29-18b508ca8a8b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:15:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39af27ee-d3a9-4bd9-ab29-18b508ca8a8b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:15:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39af27ee-d3a9-4bd9-ab29-18b508ca8a8b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:15:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39af27ee-d3a9-4bd9-ab29-18b508ca8a8b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:15:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0096c53-8a3a-45f0-a522-c2a5938cbbef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:48772","PortSpecifier":{"PortValue":48772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a0096c53-8a3a-45f0-a522-c2a5938cbbef","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:15:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0096c53-8a3a-45f0-a522-c2a5938cbbef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:48772","PortSpecifier":{"PortValue":48772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783361755,"nanos":376016304},"http":{"id":"a0096c53-8a3a-45f0-a522-c2a5938cbbef","method":"POST","headers":{":authority":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:15:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a0096c53-8a3a-45f0-a522-c2a5938cbbef","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KhyWxGbFx3BUiqnc_q6JLoqmaYJf8UdmmVa6NXua0gYMYTsHG8Hu1gDlvCBE"} {"level":"debug","ts":"2026-07-06T18:15:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a0096c53-8a3a-45f0-a522-c2a5938cbbef","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3b0a18.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KhyWxGbFx3BUiqnc_q6JLoqmaYJf8UdmmVa6NXua0gYMYTsHG8Hu1gDlvCBE\"}"} {"level":"debug","ts":"2026-07-06T18:15:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a0096c53-8a3a-45f0-a522-c2a5938cbbef","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3b0a18.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"670b0293-367b-4205-b7d7-5e2921ef6496","keyName":"e2e-auth-iso-a-55cce6","subscription":"e2e-auth-iso-e6f0fc","tenant":"e2e-shared-a-3b0a18","userId":"670b0293-367b-4205-b7d7-5e2921ef6496","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T18:15:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a0096c53-8a3a-45f0-a522-c2a5938cbbef","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:15:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0096c53-8a3a-45f0-a522-c2a5938cbbef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:15:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0096c53-8a3a-45f0-a522-c2a5938cbbef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:15:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0096c53-8a3a-45f0-a522-c2a5938cbbef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3b0a18/auth-test-model-3b0a18\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:15:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0096c53-8a3a-45f0-a522-c2a5938cbbef","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-e6f0fc"} {"level":"debug","ts":"2026-07-06T18:15:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0096c53-8a3a-45f0-a522-c2a5938cbbef","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:15:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0096c53-8a3a-45f0-a522-c2a5938cbbef","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:15:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a0096c53-8a3a-45f0-a522-c2a5938cbbef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-06T18:15:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0096c53-8a3a-45f0-a522-c2a5938cbbef","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:15:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0096c53-8a3a-45f0-a522-c2a5938cbbef","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d63607f642ac6b8fc29b484a2ea9984bcdc5d2dd3910dcc5eda21f2c3faea18"} {"level":"info","ts":"2026-07-06T18:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0bf3c302383f2258efcc10df05a12f6c98c01922db9e5f6bb4cc0a4660c37099"} {"level":"info","ts":"2026-07-06T18:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d4a1957e6510c54d42f391e1840c81bc5ddbcf03e060d08cca351809afa48968"} {"level":"info","ts":"2026-07-06T18:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc699e9fd44f4ab171a41c88c6bcc3fba1f7771ef5f7dc55945dd41da91fbf91"} {"level":"info","ts":"2026-07-06T18:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6adc24c8bc4f4ac6e8f2aa3d0678eeb0391ba0effa8753890e45b3768904905b"} {"level":"info","ts":"2026-07-06T18:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6b5ae3fd731d4b4055bc3bb6f60d13007a4fef72ffb5f76a6511e7ee0d8bac55"} {"level":"info","ts":"2026-07-06T18:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5a2e197c39248dc2336195f030b43190539d50188563d4aae049a5d85736352"} {"level":"info","ts":"2026-07-06T18:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/729864b298cb1a6684236f4eba02e5d0d413988c52effb03e26ff051bda40c87"} {"level":"info","ts":"2026-07-06T18:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35bb1434ce73912916787eb86ee1c4a3e969f2a8c29e0142a054a914783d3506"} {"level":"info","ts":"2026-07-06T18:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc3d56917f3ddb1356bdf3f031334d03f8464582e374b443b5cd3a2b20bf6590"} {"level":"info","ts":"2026-07-06T18:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f353962bb1d69ec2495f9e9cb592801cc8757b6b131cd3a57dc6c869f05d507"} {"level":"info","ts":"2026-07-06T18:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9225165939445daeb6e6d19a2ba0c2e1cbb0bc8b145d318ba6892df2193b8f3"} {"level":"info","ts":"2026-07-06T18:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be27e5ac53aa02d80df7385c73cdd0731381351b21faa8133a45d1f679080feb"} {"level":"info","ts":"2026-07-06T18:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5827d1dcb1ad29c601a092cc0079ff7e5b1437e772a0d1eff9e3c7ecc7474beb"} {"level":"info","ts":"2026-07-06T18:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d8a56df7f8b8c70e7d2bff4d02c9234d18610fc2ecf3f9e36f00d8ec1f10d97"} {"level":"info","ts":"2026-07-06T18:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2fe93785600753d0610d693771287b6f4265ace7d250c8e96191f4f979402ec8"} {"level":"debug","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a80d9577b901694344875463de8e7959aa89be58e1e346dc0130efaf3a56440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a80d9577b901694344875463de8e7959aa89be58e1e346dc0130efaf3a56440","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a80d9577b901694344875463de8e7959aa89be58e1e346dc0130efaf3a56440","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a80d9577b901694344875463de8e7959aa89be58e1e346dc0130efaf3a56440","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a80d9577b901694344875463de8e7959aa89be58e1e346dc0130efaf3a56440"} {"level":"debug","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a80d9577b901694344875463de8e7959aa89be58e1e346dc0130efaf3a56440","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a80d9577b901694344875463de8e7959aa89be58e1e346dc0130efaf3a56440"} {"level":"debug","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a80d9577b901694344875463de8e7959aa89be58e1e346dc0130efaf3a56440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a80d9577b901694344875463de8e7959aa89be58e1e346dc0130efaf3a56440"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a80d9577b901694344875463de8e7959aa89be58e1e346dc0130efaf3a56440","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a80d9577b901694344875463de8e7959aa89be58e1e346dc0130efaf3a56440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a80d9577b901694344875463de8e7959aa89be58e1e346dc0130efaf3a56440","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"312937964416229edc81e1fc25b4811616670e27983989ff94d81be39c9e1faf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a80d9577b901694344875463de8e7959aa89be58e1e346dc0130efaf3a56440"} {"level":"info","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"312937964416229edc81e1fc25b4811616670e27983989ff94d81be39c9e1faf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a80d9577b901694344875463de8e7959aa89be58e1e346dc0130efaf3a56440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a80d9577b901694344875463de8e7959aa89be58e1e346dc0130efaf3a56440"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a80d9577b901694344875463de8e7959aa89be58e1e346dc0130efaf3a56440","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"312937964416229edc81e1fc25b4811616670e27983989ff94d81be39c9e1faf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/312937964416229edc81e1fc25b4811616670e27983989ff94d81be39c9e1faf"} {"level":"info","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"312937964416229edc81e1fc25b4811616670e27983989ff94d81be39c9e1faf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a80d9577b901694344875463de8e7959aa89be58e1e346dc0130efaf3a56440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a80d9577b901694344875463de8e7959aa89be58e1e346dc0130efaf3a56440","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"312937964416229edc81e1fc25b4811616670e27983989ff94d81be39c9e1faf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["312937964416229edc81e1fc25b4811616670e27983989ff94d81be39c9e1faf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a80d9577b901694344875463de8e7959aa89be58e1e346dc0130efaf3a56440"} {"level":"info","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"312937964416229edc81e1fc25b4811616670e27983989ff94d81be39c9e1faf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a80d9577b901694344875463de8e7959aa89be58e1e346dc0130efaf3a56440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a80d9577b901694344875463de8e7959aa89be58e1e346dc0130efaf3a56440"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/312937964416229edc81e1fc25b4811616670e27983989ff94d81be39c9e1faf"} {"level":"info","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a80d9577b901694344875463de8e7959aa89be58e1e346dc0130efaf3a56440","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"312937964416229edc81e1fc25b4811616670e27983989ff94d81be39c9e1faf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a80d9577b901694344875463de8e7959aa89be58e1e346dc0130efaf3a56440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a80d9577b901694344875463de8e7959aa89be58e1e346dc0130efaf3a56440","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a80d9577b901694344875463de8e7959aa89be58e1e346dc0130efaf3a56440","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a80d9577b901694344875463de8e7959aa89be58e1e346dc0130efaf3a56440"} {"level":"debug","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a80d9577b901694344875463de8e7959aa89be58e1e346dc0130efaf3a56440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a80d9577b901694344875463de8e7959aa89be58e1e346dc0130efaf3a56440"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a80d9577b901694344875463de8e7959aa89be58e1e346dc0130efaf3a56440","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a80d9577b901694344875463de8e7959aa89be58e1e346dc0130efaf3a56440","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/312937964416229edc81e1fc25b4811616670e27983989ff94d81be39c9e1faf"} {"level":"info","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a80d9577b901694344875463de8e7959aa89be58e1e346dc0130efaf3a56440"} {"level":"debug","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d336d35b4dc2534d22eb74e166bb09558f77c04f63a04d85114b920247b1a3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d336d35b4dc2534d22eb74e166bb09558f77c04f63a04d85114b920247b1a3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d336d35b4dc2534d22eb74e166bb09558f77c04f63a04d85114b920247b1a3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d336d35b4dc2534d22eb74e166bb09558f77c04f63a04d85114b920247b1a3e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d336d35b4dc2534d22eb74e166bb09558f77c04f63a04d85114b920247b1a3e"} {"level":"debug","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d336d35b4dc2534d22eb74e166bb09558f77c04f63a04d85114b920247b1a3e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d336d35b4dc2534d22eb74e166bb09558f77c04f63a04d85114b920247b1a3e"} {"level":"debug","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d336d35b4dc2534d22eb74e166bb09558f77c04f63a04d85114b920247b1a3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d336d35b4dc2534d22eb74e166bb09558f77c04f63a04d85114b920247b1a3e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d336d35b4dc2534d22eb74e166bb09558f77c04f63a04d85114b920247b1a3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d336d35b4dc2534d22eb74e166bb09558f77c04f63a04d85114b920247b1a3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d336d35b4dc2534d22eb74e166bb09558f77c04f63a04d85114b920247b1a3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b51e9ab2b371c884b9f6cb6c592f199db3819bf5580c20cb1deb87acd3c1b957","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d336d35b4dc2534d22eb74e166bb09558f77c04f63a04d85114b920247b1a3e"} {"level":"info","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b51e9ab2b371c884b9f6cb6c592f199db3819bf5580c20cb1deb87acd3c1b957","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d336d35b4dc2534d22eb74e166bb09558f77c04f63a04d85114b920247b1a3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d336d35b4dc2534d22eb74e166bb09558f77c04f63a04d85114b920247b1a3e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d336d35b4dc2534d22eb74e166bb09558f77c04f63a04d85114b920247b1a3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b51e9ab2b371c884b9f6cb6c592f199db3819bf5580c20cb1deb87acd3c1b957","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b51e9ab2b371c884b9f6cb6c592f199db3819bf5580c20cb1deb87acd3c1b957"} {"level":"info","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b51e9ab2b371c884b9f6cb6c592f199db3819bf5580c20cb1deb87acd3c1b957","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d336d35b4dc2534d22eb74e166bb09558f77c04f63a04d85114b920247b1a3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d336d35b4dc2534d22eb74e166bb09558f77c04f63a04d85114b920247b1a3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b51e9ab2b371c884b9f6cb6c592f199db3819bf5580c20cb1deb87acd3c1b957","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b51e9ab2b371c884b9f6cb6c592f199db3819bf5580c20cb1deb87acd3c1b957"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d336d35b4dc2534d22eb74e166bb09558f77c04f63a04d85114b920247b1a3e"} {"level":"info","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b51e9ab2b371c884b9f6cb6c592f199db3819bf5580c20cb1deb87acd3c1b957","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d336d35b4dc2534d22eb74e166bb09558f77c04f63a04d85114b920247b1a3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d336d35b4dc2534d22eb74e166bb09558f77c04f63a04d85114b920247b1a3e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b51e9ab2b371c884b9f6cb6c592f199db3819bf5580c20cb1deb87acd3c1b957"} {"level":"info","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d336d35b4dc2534d22eb74e166bb09558f77c04f63a04d85114b920247b1a3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b51e9ab2b371c884b9f6cb6c592f199db3819bf5580c20cb1deb87acd3c1b957","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d336d35b4dc2534d22eb74e166bb09558f77c04f63a04d85114b920247b1a3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d336d35b4dc2534d22eb74e166bb09558f77c04f63a04d85114b920247b1a3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d336d35b4dc2534d22eb74e166bb09558f77c04f63a04d85114b920247b1a3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d336d35b4dc2534d22eb74e166bb09558f77c04f63a04d85114b920247b1a3e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d336d35b4dc2534d22eb74e166bb09558f77c04f63a04d85114b920247b1a3e"} {"level":"debug","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf9326537855db441faddfffe864724ce5c261dfd9938be719d2a630ab88c104","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf9326537855db441faddfffe864724ce5c261dfd9938be719d2a630ab88c104","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d336d35b4dc2534d22eb74e166bb09558f77c04f63a04d85114b920247b1a3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d336d35b4dc2534d22eb74e166bb09558f77c04f63a04d85114b920247b1a3e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b51e9ab2b371c884b9f6cb6c592f199db3819bf5580c20cb1deb87acd3c1b957"} {"level":"info","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d336d35b4dc2534d22eb74e166bb09558f77c04f63a04d85114b920247b1a3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf9326537855db441faddfffe864724ce5c261dfd9938be719d2a630ab88c104","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d336d35b4dc2534d22eb74e166bb09558f77c04f63a04d85114b920247b1a3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d336d35b4dc2534d22eb74e166bb09558f77c04f63a04d85114b920247b1a3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf9326537855db441faddfffe864724ce5c261dfd9938be719d2a630ab88c104","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d336d35b4dc2534d22eb74e166bb09558f77c04f63a04d85114b920247b1a3e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d336d35b4dc2534d22eb74e166bb09558f77c04f63a04d85114b920247b1a3e"} {"level":"debug","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d336d35b4dc2534d22eb74e166bb09558f77c04f63a04d85114b920247b1a3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:16:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:16:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d336d35b4dc2534d22eb74e166bb09558f77c04f63a04d85114b920247b1a3e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d336d35b4dc2534d22eb74e166bb09558f77c04f63a04d85114b920247b1a3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d336d35b4dc2534d22eb74e166bb09558f77c04f63a04d85114b920247b1a3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf9326537855db441faddfffe864724ce5c261dfd9938be719d2a630ab88c104","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:16:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf9326537855db441faddfffe864724ce5c261dfd9938be719d2a630ab88c104"} {"level":"info","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf9326537855db441faddfffe864724ce5c261dfd9938be719d2a630ab88c104","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf9326537855db441faddfffe864724ce5c261dfd9938be719d2a630ab88c104","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:16:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:16:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf9326537855db441faddfffe864724ce5c261dfd9938be719d2a630ab88c104"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf9326537855db441faddfffe864724ce5c261dfd9938be719d2a630ab88c104","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf9326537855db441faddfffe864724ce5c261dfd9938be719d2a630ab88c104","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d336d35b4dc2534d22eb74e166bb09558f77c04f63a04d85114b920247b1a3e"} {"level":"debug","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf9326537855db441faddfffe864724ce5c261dfd9938be719d2a630ab88c104","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:16:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:16:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf9326537855db441faddfffe864724ce5c261dfd9938be719d2a630ab88c104"} {"level":"info","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf9326537855db441faddfffe864724ce5c261dfd9938be719d2a630ab88c104","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf9326537855db441faddfffe864724ce5c261dfd9938be719d2a630ab88c104","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf9326537855db441faddfffe864724ce5c261dfd9938be719d2a630ab88c104","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf9326537855db441faddfffe864724ce5c261dfd9938be719d2a630ab88c104","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf9326537855db441faddfffe864724ce5c261dfd9938be719d2a630ab88c104"} {"level":"debug","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac57a793ecf3676f10f198fd2e12f2de9d0e5758d9f482772638062ed31facad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:16:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:16:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac57a793ecf3676f10f198fd2e12f2de9d0e5758d9f482772638062ed31facad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf9326537855db441faddfffe864724ce5c261dfd9938be719d2a630ab88c104","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:16:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:16:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf9326537855db441faddfffe864724ce5c261dfd9938be719d2a630ab88c104"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac57a793ecf3676f10f198fd2e12f2de9d0e5758d9f482772638062ed31facad"} {"level":"info","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf9326537855db441faddfffe864724ce5c261dfd9938be719d2a630ab88c104","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5747b57b4823c60f38df60db8ea954df4548deb92bf957747e8d96b258f3263f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:16:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:16:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5747b57b4823c60f38df60db8ea954df4548deb92bf957747e8d96b258f3263f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac57a793ecf3676f10f198fd2e12f2de9d0e5758d9f482772638062ed31facad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:16:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:16:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac57a793ecf3676f10f198fd2e12f2de9d0e5758d9f482772638062ed31facad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5747b57b4823c60f38df60db8ea954df4548deb92bf957747e8d96b258f3263f"} {"level":"info","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac57a793ecf3676f10f198fd2e12f2de9d0e5758d9f482772638062ed31facad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78c36675000ae720ed11f624755c59f53b209afd4ee110f278a6b92aa073f194","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:16:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:16:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78c36675000ae720ed11f624755c59f53b209afd4ee110f278a6b92aa073f194","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf9326537855db441faddfffe864724ce5c261dfd9938be719d2a630ab88c104","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5747b57b4823c60f38df60db8ea954df4548deb92bf957747e8d96b258f3263f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:16:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:16:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5747b57b4823c60f38df60db8ea954df4548deb92bf957747e8d96b258f3263f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac57a793ecf3676f10f198fd2e12f2de9d0e5758d9f482772638062ed31facad"} {"level":"info","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5747b57b4823c60f38df60db8ea954df4548deb92bf957747e8d96b258f3263f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac57a793ecf3676f10f198fd2e12f2de9d0e5758d9f482772638062ed31facad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78c36675000ae720ed11f624755c59f53b209afd4ee110f278a6b92aa073f194","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:16:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:16:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78c36675000ae720ed11f624755c59f53b209afd4ee110f278a6b92aa073f194"} {"level":"info","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78c36675000ae720ed11f624755c59f53b209afd4ee110f278a6b92aa073f194","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5747b57b4823c60f38df60db8ea954df4548deb92bf957747e8d96b258f3263f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78c36675000ae720ed11f624755c59f53b209afd4ee110f278a6b92aa073f194","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:16:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:16:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78c36675000ae720ed11f624755c59f53b209afd4ee110f278a6b92aa073f194"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf9326537855db441faddfffe864724ce5c261dfd9938be719d2a630ab88c104"} {"level":"info","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78c36675000ae720ed11f624755c59f53b209afd4ee110f278a6b92aa073f194","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78c36675000ae720ed11f624755c59f53b209afd4ee110f278a6b92aa073f194","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:16:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:16:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78c36675000ae720ed11f624755c59f53b209afd4ee110f278a6b92aa073f194"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"78c36675000ae720ed11f624755c59f53b209afd4ee110f278a6b92aa073f194","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"78c36675000ae720ed11f624755c59f53b209afd4ee110f278a6b92aa073f194\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78c36675000ae720ed11f624755c59f53b209afd4ee110f278a6b92aa073f194","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78c36675000ae720ed11f624755c59f53b209afd4ee110f278a6b92aa073f194","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5747b57b4823c60f38df60db8ea954df4548deb92bf957747e8d96b258f3263f"} {"level":"info","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac57a793ecf3676f10f198fd2e12f2de9d0e5758d9f482772638062ed31facad"} {"level":"info","ts":"2026-07-06T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78c36675000ae720ed11f624755c59f53b209afd4ee110f278a6b92aa073f194"} {"level":"debug","ts":"2026-07-06T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be19c63794d8a3a0a2819d072b2a745a7bb5785f7ced60d0b69fe709416f6b12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:16:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:16:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be19c63794d8a3a0a2819d072b2a745a7bb5785f7ced60d0b69fe709416f6b12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be19c63794d8a3a0a2819d072b2a745a7bb5785f7ced60d0b69fe709416f6b12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be19c63794d8a3a0a2819d072b2a745a7bb5785f7ced60d0b69fe709416f6b12","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be19c63794d8a3a0a2819d072b2a745a7bb5785f7ced60d0b69fe709416f6b12"} {"level":"debug","ts":"2026-07-06T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be19c63794d8a3a0a2819d072b2a745a7bb5785f7ced60d0b69fe709416f6b12","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be19c63794d8a3a0a2819d072b2a745a7bb5785f7ced60d0b69fe709416f6b12"} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be19c63794d8a3a0a2819d072b2a745a7bb5785f7ced60d0b69fe709416f6b12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be19c63794d8a3a0a2819d072b2a745a7bb5785f7ced60d0b69fe709416f6b12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be19c63794d8a3a0a2819d072b2a745a7bb5785f7ced60d0b69fe709416f6b12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be19c63794d8a3a0a2819d072b2a745a7bb5785f7ced60d0b69fe709416f6b12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0e10c655ddec0f0e35f0dc700c936b08893bbcf07ca39119da05438776dd951","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0e10c655ddec0f0e35f0dc700c936b08893bbcf07ca39119da05438776dd951","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0e10c655ddec0f0e35f0dc700c936b08893bbcf07ca39119da05438776dd951","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0e10c655ddec0f0e35f0dc700c936b08893bbcf07ca39119da05438776dd951","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be19c63794d8a3a0a2819d072b2a745a7bb5785f7ced60d0b69fe709416f6b12"} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0e10c655ddec0f0e35f0dc700c936b08893bbcf07ca39119da05438776dd951","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0e10c655ddec0f0e35f0dc700c936b08893bbcf07ca39119da05438776dd951","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0e10c655ddec0f0e35f0dc700c936b08893bbcf07ca39119da05438776dd951"} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0e10c655ddec0f0e35f0dc700c936b08893bbcf07ca39119da05438776dd951","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0e10c655ddec0f0e35f0dc700c936b08893bbcf07ca39119da05438776dd951"} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0e10c655ddec0f0e35f0dc700c936b08893bbcf07ca39119da05438776dd951","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0e10c655ddec0f0e35f0dc700c936b08893bbcf07ca39119da05438776dd951"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0e10c655ddec0f0e35f0dc700c936b08893bbcf07ca39119da05438776dd951","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d45a87cff8d9ff165410671e68e97bfbe51d75dda8f946ccb36c68e2187ba15a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d45a87cff8d9ff165410671e68e97bfbe51d75dda8f946ccb36c68e2187ba15a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0e10c655ddec0f0e35f0dc700c936b08893bbcf07ca39119da05438776dd951","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d45a87cff8d9ff165410671e68e97bfbe51d75dda8f946ccb36c68e2187ba15a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d45a87cff8d9ff165410671e68e97bfbe51d75dda8f946ccb36c68e2187ba15a"} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d45a87cff8d9ff165410671e68e97bfbe51d75dda8f946ccb36c68e2187ba15a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d45a87cff8d9ff165410671e68e97bfbe51d75dda8f946ccb36c68e2187ba15a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d45a87cff8d9ff165410671e68e97bfbe51d75dda8f946ccb36c68e2187ba15a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d45a87cff8d9ff165410671e68e97bfbe51d75dda8f946ccb36c68e2187ba15a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0e10c655ddec0f0e35f0dc700c936b08893bbcf07ca39119da05438776dd951"} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d45a87cff8d9ff165410671e68e97bfbe51d75dda8f946ccb36c68e2187ba15a"} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd311a725f2d5854900795c46bf04caccfdd3bd5acfd1f77515cf8053ae67392","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd311a725f2d5854900795c46bf04caccfdd3bd5acfd1f77515cf8053ae67392","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd311a725f2d5854900795c46bf04caccfdd3bd5acfd1f77515cf8053ae67392","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd311a725f2d5854900795c46bf04caccfdd3bd5acfd1f77515cf8053ae67392","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd311a725f2d5854900795c46bf04caccfdd3bd5acfd1f77515cf8053ae67392"} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd311a725f2d5854900795c46bf04caccfdd3bd5acfd1f77515cf8053ae67392","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd311a725f2d5854900795c46bf04caccfdd3bd5acfd1f77515cf8053ae67392"} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd311a725f2d5854900795c46bf04caccfdd3bd5acfd1f77515cf8053ae67392","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd311a725f2d5854900795c46bf04caccfdd3bd5acfd1f77515cf8053ae67392"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd311a725f2d5854900795c46bf04caccfdd3bd5acfd1f77515cf8053ae67392","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd311a725f2d5854900795c46bf04caccfdd3bd5acfd1f77515cf8053ae67392","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd311a725f2d5854900795c46bf04caccfdd3bd5acfd1f77515cf8053ae67392","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd311a725f2d5854900795c46bf04caccfdd3bd5acfd1f77515cf8053ae67392"} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd311a725f2d5854900795c46bf04caccfdd3bd5acfd1f77515cf8053ae67392","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd311a725f2d5854900795c46bf04caccfdd3bd5acfd1f77515cf8053ae67392"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd311a725f2d5854900795c46bf04caccfdd3bd5acfd1f77515cf8053ae67392","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceddb0904fedae45379cd62a17f02cdfafc7a740c9d9749d1133a4e506314225","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e"} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ceddb0904fedae45379cd62a17f02cdfafc7a740c9d9749d1133a4e506314225","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd311a725f2d5854900795c46bf04caccfdd3bd5acfd1f77515cf8053ae67392","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceddb0904fedae45379cd62a17f02cdfafc7a740c9d9749d1133a4e506314225","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceddb0904fedae45379cd62a17f02cdfafc7a740c9d9749d1133a4e506314225"} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ceddb0904fedae45379cd62a17f02cdfafc7a740c9d9749d1133a4e506314225","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceddb0904fedae45379cd62a17f02cdfafc7a740c9d9749d1133a4e506314225","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ceddb0904fedae45379cd62a17f02cdfafc7a740c9d9749d1133a4e506314225"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd311a725f2d5854900795c46bf04caccfdd3bd5acfd1f77515cf8053ae67392"} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ceddb0904fedae45379cd62a17f02cdfafc7a740c9d9749d1133a4e506314225","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceddb0904fedae45379cd62a17f02cdfafc7a740c9d9749d1133a4e506314225","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ceddb0904fedae45379cd62a17f02cdfafc7a740c9d9749d1133a4e506314225"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ceddb0904fedae45379cd62a17f02cdfafc7a740c9d9749d1133a4e506314225","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ceddb0904fedae45379cd62a17f02cdfafc7a740c9d9749d1133a4e506314225\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ceddb0904fedae45379cd62a17f02cdfafc7a740c9d9749d1133a4e506314225","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ceddb0904fedae45379cd62a17f02cdfafc7a740c9d9749d1133a4e506314225","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e"} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceddb0904fedae45379cd62a17f02cdfafc7a740c9d9749d1133a4e506314225"} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57197080db01fae3e264658cbb3cc25694117e6ea051347b4c7483680cc21023","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56"} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57197080db01fae3e264658cbb3cc25694117e6ea051347b4c7483680cc21023","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57197080db01fae3e264658cbb3cc25694117e6ea051347b4c7483680cc21023","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57197080db01fae3e264658cbb3cc25694117e6ea051347b4c7483680cc21023"} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57197080db01fae3e264658cbb3cc25694117e6ea051347b4c7483680cc21023","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57197080db01fae3e264658cbb3cc25694117e6ea051347b4c7483680cc21023","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57197080db01fae3e264658cbb3cc25694117e6ea051347b4c7483680cc21023"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56"} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57197080db01fae3e264658cbb3cc25694117e6ea051347b4c7483680cc21023","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57197080db01fae3e264658cbb3cc25694117e6ea051347b4c7483680cc21023","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57197080db01fae3e264658cbb3cc25694117e6ea051347b4c7483680cc21023"} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57197080db01fae3e264658cbb3cc25694117e6ea051347b4c7483680cc21023","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56"} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57197080db01fae3e264658cbb3cc25694117e6ea051347b4c7483680cc21023","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57197080db01fae3e264658cbb3cc25694117e6ea051347b4c7483680cc21023","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57197080db01fae3e264658cbb3cc25694117e6ea051347b4c7483680cc21023"} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57197080db01fae3e264658cbb3cc25694117e6ea051347b4c7483680cc21023","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57197080db01fae3e264658cbb3cc25694117e6ea051347b4c7483680cc21023"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56"} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57197080db01fae3e264658cbb3cc25694117e6ea051347b4c7483680cc21023","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57197080db01fae3e264658cbb3cc25694117e6ea051347b4c7483680cc21023","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56"} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57197080db01fae3e264658cbb3cc25694117e6ea051347b4c7483680cc21023"} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56"} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56"} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56"} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56"} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:16:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56"} {"level":"debug","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56"} {"level":"debug","ts":"2026-07-06T18:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:16:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:16:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56"} {"level":"debug","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e"} {"level":"debug","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e"} {"level":"debug","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:17:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:17:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e"} {"level":"debug","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e"} {"level":"debug","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:17:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:17:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e"} {"level":"debug","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e"} {"level":"debug","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:17:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:17:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78c36675000ae720ed11f624755c59f53b209afd4ee110f278a6b92aa073f194","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e"} {"level":"debug","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:17:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:17:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78c36675000ae720ed11f624755c59f53b209afd4ee110f278a6b92aa073f194"} {"level":"info","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e"} {"level":"debug","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e"} {"level":"debug","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:17:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:17:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e"} {"level":"debug","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e"} {"level":"debug","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:17:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:17:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5747b57b4823c60f38df60db8ea954df4548deb92bf957747e8d96b258f3263f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e"} {"level":"info","ts":"2026-07-06T18:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5747b57b4823c60f38df60db8ea954df4548deb92bf957747e8d96b258f3263f"} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b51e9ab2b371c884b9f6cb6c592f199db3819bf5580c20cb1deb87acd3c1b957","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b51e9ab2b371c884b9f6cb6c592f199db3819bf5580c20cb1deb87acd3c1b957","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b51e9ab2b371c884b9f6cb6c592f199db3819bf5580c20cb1deb87acd3c1b957","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b51e9ab2b371c884b9f6cb6c592f199db3819bf5580c20cb1deb87acd3c1b957","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b51e9ab2b371c884b9f6cb6c592f199db3819bf5580c20cb1deb87acd3c1b957"} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b51e9ab2b371c884b9f6cb6c592f199db3819bf5580c20cb1deb87acd3c1b957","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b51e9ab2b371c884b9f6cb6c592f199db3819bf5580c20cb1deb87acd3c1b957"} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b51e9ab2b371c884b9f6cb6c592f199db3819bf5580c20cb1deb87acd3c1b957","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:17:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:17:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b51e9ab2b371c884b9f6cb6c592f199db3819bf5580c20cb1deb87acd3c1b957"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b51e9ab2b371c884b9f6cb6c592f199db3819bf5580c20cb1deb87acd3c1b957","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b51e9ab2b371c884b9f6cb6c592f199db3819bf5580c20cb1deb87acd3c1b957","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b51e9ab2b371c884b9f6cb6c592f199db3819bf5580c20cb1deb87acd3c1b957","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b51e9ab2b371c884b9f6cb6c592f199db3819bf5580c20cb1deb87acd3c1b957","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b51e9ab2b371c884b9f6cb6c592f199db3819bf5580c20cb1deb87acd3c1b957","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b51e9ab2b371c884b9f6cb6c592f199db3819bf5580c20cb1deb87acd3c1b957"} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b51e9ab2b371c884b9f6cb6c592f199db3819bf5580c20cb1deb87acd3c1b957","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:17:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:17:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b51e9ab2b371c884b9f6cb6c592f199db3819bf5580c20cb1deb87acd3c1b957"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56"} {"level":"info","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b51e9ab2b371c884b9f6cb6c592f199db3819bf5580c20cb1deb87acd3c1b957","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b51e9ab2b371c884b9f6cb6c592f199db3819bf5580c20cb1deb87acd3c1b957","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b51e9ab2b371c884b9f6cb6c592f199db3819bf5580c20cb1deb87acd3c1b957","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b51e9ab2b371c884b9f6cb6c592f199db3819bf5580c20cb1deb87acd3c1b957"} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b51e9ab2b371c884b9f6cb6c592f199db3819bf5580c20cb1deb87acd3c1b957","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b51e9ab2b371c884b9f6cb6c592f199db3819bf5580c20cb1deb87acd3c1b957","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b51e9ab2b371c884b9f6cb6c592f199db3819bf5580c20cb1deb87acd3c1b957"} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b51e9ab2b371c884b9f6cb6c592f199db3819bf5580c20cb1deb87acd3c1b957","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d45a87cff8d9ff165410671e68e97bfbe51d75dda8f946ccb36c68e2187ba15a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b51e9ab2b371c884b9f6cb6c592f199db3819bf5580c20cb1deb87acd3c1b957"} {"level":"info","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d45a87cff8d9ff165410671e68e97bfbe51d75dda8f946ccb36c68e2187ba15a"} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b51e9ab2b371c884b9f6cb6c592f199db3819bf5580c20cb1deb87acd3c1b957","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:17:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:17:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b51e9ab2b371c884b9f6cb6c592f199db3819bf5580c20cb1deb87acd3c1b957"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b51e9ab2b371c884b9f6cb6c592f199db3819bf5580c20cb1deb87acd3c1b957","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b51e9ab2b371c884b9f6cb6c592f199db3819bf5580c20cb1deb87acd3c1b957","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b51e9ab2b371c884b9f6cb6c592f199db3819bf5580c20cb1deb87acd3c1b957"} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0e10c655ddec0f0e35f0dc700c936b08893bbcf07ca39119da05438776dd951","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0e10c655ddec0f0e35f0dc700c936b08893bbcf07ca39119da05438776dd951","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0e10c655ddec0f0e35f0dc700c936b08893bbcf07ca39119da05438776dd951","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0e10c655ddec0f0e35f0dc700c936b08893bbcf07ca39119da05438776dd951","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0e10c655ddec0f0e35f0dc700c936b08893bbcf07ca39119da05438776dd951"} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0e10c655ddec0f0e35f0dc700c936b08893bbcf07ca39119da05438776dd951","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0e10c655ddec0f0e35f0dc700c936b08893bbcf07ca39119da05438776dd951"} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0e10c655ddec0f0e35f0dc700c936b08893bbcf07ca39119da05438776dd951","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:17:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:17:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0e10c655ddec0f0e35f0dc700c936b08893bbcf07ca39119da05438776dd951"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0e10c655ddec0f0e35f0dc700c936b08893bbcf07ca39119da05438776dd951","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0e10c655ddec0f0e35f0dc700c936b08893bbcf07ca39119da05438776dd951","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be19c63794d8a3a0a2819d072b2a745a7bb5785f7ced60d0b69fe709416f6b12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf9326537855db441faddfffe864724ce5c261dfd9938be719d2a630ab88c104","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0e10c655ddec0f0e35f0dc700c936b08893bbcf07ca39119da05438776dd951"} {"level":"info","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be19c63794d8a3a0a2819d072b2a745a7bb5785f7ced60d0b69fe709416f6b12"} {"level":"info","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf9326537855db441faddfffe864724ce5c261dfd9938be719d2a630ab88c104"} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57197080db01fae3e264658cbb3cc25694117e6ea051347b4c7483680cc21023","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57197080db01fae3e264658cbb3cc25694117e6ea051347b4c7483680cc21023","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57197080db01fae3e264658cbb3cc25694117e6ea051347b4c7483680cc21023","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57197080db01fae3e264658cbb3cc25694117e6ea051347b4c7483680cc21023","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57197080db01fae3e264658cbb3cc25694117e6ea051347b4c7483680cc21023"} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57197080db01fae3e264658cbb3cc25694117e6ea051347b4c7483680cc21023","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57197080db01fae3e264658cbb3cc25694117e6ea051347b4c7483680cc21023"} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57197080db01fae3e264658cbb3cc25694117e6ea051347b4c7483680cc21023","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:17:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:17:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57197080db01fae3e264658cbb3cc25694117e6ea051347b4c7483680cc21023"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57197080db01fae3e264658cbb3cc25694117e6ea051347b4c7483680cc21023","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57197080db01fae3e264658cbb3cc25694117e6ea051347b4c7483680cc21023","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d336d35b4dc2534d22eb74e166bb09558f77c04f63a04d85114b920247b1a3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57197080db01fae3e264658cbb3cc25694117e6ea051347b4c7483680cc21023"} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"312937964416229edc81e1fc25b4811616670e27983989ff94d81be39c9e1faf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d336d35b4dc2534d22eb74e166bb09558f77c04f63a04d85114b920247b1a3e"} {"level":"info","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"} {"level":"info","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/312937964416229edc81e1fc25b4811616670e27983989ff94d81be39c9e1faf"} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd311a725f2d5854900795c46bf04caccfdd3bd5acfd1f77515cf8053ae67392","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145"} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"671856ca9175d3dac06f078fc4ca2c853ae4308a64c3f38aa01605cfcefe78df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:17:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:17:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd311a725f2d5854900795c46bf04caccfdd3bd5acfd1f77515cf8053ae67392"} {"level":"info","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145"} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:17:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:17:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/671856ca9175d3dac06f078fc4ca2c853ae4308a64c3f38aa01605cfcefe78df"} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4dff02adbbe53f4e055bc4b4742ac0dad7b268fb4b8aeb907280eba11e2a6d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ceddb0904fedae45379cd62a17f02cdfafc7a740c9d9749d1133a4e506314225","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145"} {"level":"debug","ts":"2026-07-06T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a80d9577b901694344875463de8e7959aa89be58e1e346dc0130efaf3a56440","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac57a793ecf3676f10f198fd2e12f2de9d0e5758d9f482772638062ed31facad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4dff02adbbe53f4e055bc4b4742ac0dad7b268fb4b8aeb907280eba11e2a6d7"} {"level":"info","ts":"2026-07-06T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceddb0904fedae45379cd62a17f02cdfafc7a740c9d9749d1133a4e506314225"} {"level":"info","ts":"2026-07-06T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a80d9577b901694344875463de8e7959aa89be58e1e346dc0130efaf3a56440"} {"level":"info","ts":"2026-07-06T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac57a793ecf3676f10f198fd2e12f2de9d0e5758d9f482772638062ed31facad"} {"level":"info","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f30ca21-3337-4aef-9d19-dbbb1b5df14c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59744","PortSpecifier":{"PortValue":59744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5f30ca21-3337-4aef-9d19-dbbb1b5df14c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f30ca21-3337-4aef-9d19-dbbb1b5df14c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59744","PortSpecifier":{"PortValue":59744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783361829,"nanos":161570658},"http":{"id":"5f30ca21-3337-4aef-9d19-dbbb1b5df14c","method":"POST","headers":{":authority":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5f30ca21-3337-4aef-9d19-dbbb1b5df14c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5f30ca21-3337-4aef-9d19-dbbb1b5df14c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"]}} {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5f30ca21-3337-4aef-9d19-dbbb1b5df14c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f30ca21-3337-4aef-9d19-dbbb1b5df14c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f30ca21-3337-4aef-9d19-dbbb1b5df14c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f30ca21-3337-4aef-9d19-dbbb1b5df14c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3b0a18/sub-test-model-3b0a18\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5f30ca21-3337-4aef-9d19-dbbb1b5df14c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f30ca21-3337-4aef-9d19-dbbb1b5df14c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f30ca21-3337-4aef-9d19-dbbb1b5df14c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f30ca21-3337-4aef-9d19-dbbb1b5df14c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f30ca21-3337-4aef-9d19-dbbb1b5df14c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b4ccdcc1-91c6-4548-816b-8db0e4b6932f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41994","PortSpecifier":{"PortValue":41994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b4ccdcc1-91c6-4548-816b-8db0e4b6932f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b4ccdcc1-91c6-4548-816b-8db0e4b6932f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41994","PortSpecifier":{"PortValue":41994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783361829,"nanos":204586923},"http":{"id":"b4ccdcc1-91c6-4548-816b-8db0e4b6932f","method":"POST","headers":{":authority":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b4ccdcc1-91c6-4548-816b-8db0e4b6932f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b4ccdcc1-91c6-4548-816b-8db0e4b6932f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"]}} {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b4ccdcc1-91c6-4548-816b-8db0e4b6932f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4ccdcc1-91c6-4548-816b-8db0e4b6932f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4ccdcc1-91c6-4548-816b-8db0e4b6932f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4ccdcc1-91c6-4548-816b-8db0e4b6932f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a0e97d/sub-test-model-a0e97d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b4ccdcc1-91c6-4548-816b-8db0e4b6932f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b4ccdcc1-91c6-4548-816b-8db0e4b6932f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b4ccdcc1-91c6-4548-816b-8db0e4b6932f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b4ccdcc1-91c6-4548-816b-8db0e4b6932f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b4ccdcc1-91c6-4548-816b-8db0e4b6932f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f699fe97-3dbf-429f-a80e-0bb3f4783e04","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59756","PortSpecifier":{"PortValue":59756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f699fe97-3dbf-429f-a80e-0bb3f4783e04","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f699fe97-3dbf-429f-a80e-0bb3f4783e04","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59756","PortSpecifier":{"PortValue":59756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783361829,"nanos":247648694},"http":{"id":"f699fe97-3dbf-429f-a80e-0bb3f4783e04","method":"GET","headers":{":authority":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f699fe97-3dbf-429f-a80e-0bb3f4783e04","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yna2rgcH6giWIyQm_E5CFkqJx7xWRU1D8tNXFdLAOIg52BAdI0CnGHLuAxVF"} {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f699fe97-3dbf-429f-a80e-0bb3f4783e04","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3b0a18.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yna2rgcH6giWIyQm_E5CFkqJx7xWRU1D8tNXFdLAOIg52BAdI0CnGHLuAxVF\"}"} {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f699fe97-3dbf-429f-a80e-0bb3f4783e04","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3b0a18.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4912255d-a9c0-4394-8d5d-c159c304f392","keyName":"e2e-sub-iso-216ba6","subscription":"e2e-a-only-116270","tenant":"e2e-shared-a-3b0a18","userId":"4912255d-a9c0-4394-8d5d-c159c304f392","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f699fe97-3dbf-429f-a80e-0bb3f4783e04","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f699fe97-3dbf-429f-a80e-0bb3f4783e04","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f699fe97-3dbf-429f-a80e-0bb3f4783e04","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f699fe97-3dbf-429f-a80e-0bb3f4783e04","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3b0a18/sub-test-model-3b0a18\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f699fe97-3dbf-429f-a80e-0bb3f4783e04","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f699fe97-3dbf-429f-a80e-0bb3f4783e04","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f699fe97-3dbf-429f-a80e-0bb3f4783e04","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-116270"} {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f699fe97-3dbf-429f-a80e-0bb3f4783e04","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f699fe97-3dbf-429f-a80e-0bb3f4783e04","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f699fe97-3dbf-429f-a80e-0bb3f4783e04","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74610f77-d994-49be-92a5-5a04cad7448f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42004","PortSpecifier":{"PortValue":42004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"74610f77-d994-49be-92a5-5a04cad7448f","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74610f77-d994-49be-92a5-5a04cad7448f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42004","PortSpecifier":{"PortValue":42004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783361829,"nanos":289540608},"http":{"id":"74610f77-d994-49be-92a5-5a04cad7448f","method":"GET","headers":{":authority":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"74610f77-d994-49be-92a5-5a04cad7448f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tKne6IpbeA9jlmye_VMhxErO3RTYBCRLxoBEXIa0993WlS00l1w2HLVDgGRf"} {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"74610f77-d994-49be-92a5-5a04cad7448f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-a0e97d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tKne6IpbeA9jlmye_VMhxErO3RTYBCRLxoBEXIa0993WlS00l1w2HLVDgGRf\"}"} {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"74610f77-d994-49be-92a5-5a04cad7448f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a0e97d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7b2ec178-1d48-4c64-86f2-cd7a641f679e","keyName":"e2e-sub-iso-320642","subscription":"e2e-b-only-116270","tenant":"e2e-shared-b-a0e97d","userId":"7b2ec178-1d48-4c64-86f2-cd7a641f679e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"74610f77-d994-49be-92a5-5a04cad7448f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74610f77-d994-49be-92a5-5a04cad7448f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74610f77-d994-49be-92a5-5a04cad7448f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74610f77-d994-49be-92a5-5a04cad7448f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a0e97d/sub-test-model-a0e97d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74610f77-d994-49be-92a5-5a04cad7448f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74610f77-d994-49be-92a5-5a04cad7448f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-116270"} {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74610f77-d994-49be-92a5-5a04cad7448f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"74610f77-d994-49be-92a5-5a04cad7448f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74610f77-d994-49be-92a5-5a04cad7448f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:17:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74610f77-d994-49be-92a5-5a04cad7448f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87d37a96-2b0f-48f3-aaac-e3fd582f3fba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:48746","PortSpecifier":{"PortValue":48746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87d37a96-2b0f-48f3-aaac-e3fd582f3fba","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87d37a96-2b0f-48f3-aaac-e3fd582f3fba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:48746","PortSpecifier":{"PortValue":48746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783361843,"nanos":20391426},"http":{"id":"87d37a96-2b0f-48f3-aaac-e3fd582f3fba","method":"POST","headers":{":authority":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"87d37a96-2b0f-48f3-aaac-e3fd582f3fba","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87d37a96-2b0f-48f3-aaac-e3fd582f3fba","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"]}} {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87d37a96-2b0f-48f3-aaac-e3fd582f3fba","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87d37a96-2b0f-48f3-aaac-e3fd582f3fba","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87d37a96-2b0f-48f3-aaac-e3fd582f3fba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87d37a96-2b0f-48f3-aaac-e3fd582f3fba","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3b0a18/sub-test-model-3b0a18\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"87d37a96-2b0f-48f3-aaac-e3fd582f3fba","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87d37a96-2b0f-48f3-aaac-e3fd582f3fba","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87d37a96-2b0f-48f3-aaac-e3fd582f3fba","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87d37a96-2b0f-48f3-aaac-e3fd582f3fba","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87d37a96-2b0f-48f3-aaac-e3fd582f3fba","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6580eba1-4a97-461c-ab80-374386aef816","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:32780","PortSpecifier":{"PortValue":32780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6580eba1-4a97-461c-ab80-374386aef816","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6580eba1-4a97-461c-ab80-374386aef816","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:32780","PortSpecifier":{"PortValue":32780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783361843,"nanos":63227546},"http":{"id":"6580eba1-4a97-461c-ab80-374386aef816","method":"POST","headers":{":authority":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6580eba1-4a97-461c-ab80-374386aef816","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6580eba1-4a97-461c-ab80-374386aef816","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"]}} {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6580eba1-4a97-461c-ab80-374386aef816","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6580eba1-4a97-461c-ab80-374386aef816","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6580eba1-4a97-461c-ab80-374386aef816","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6580eba1-4a97-461c-ab80-374386aef816","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a0e97d/sub-test-model-a0e97d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6580eba1-4a97-461c-ab80-374386aef816","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6580eba1-4a97-461c-ab80-374386aef816","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6580eba1-4a97-461c-ab80-374386aef816","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6580eba1-4a97-461c-ab80-374386aef816","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6580eba1-4a97-461c-ab80-374386aef816","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34f3223a-82df-4d57-89c2-5f76bda8b2a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:48750","PortSpecifier":{"PortValue":48750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"34f3223a-82df-4d57-89c2-5f76bda8b2a0","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34f3223a-82df-4d57-89c2-5f76bda8b2a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:48750","PortSpecifier":{"PortValue":48750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783361843,"nanos":104527521},"http":{"id":"34f3223a-82df-4d57-89c2-5f76bda8b2a0","method":"POST","headers":{":authority":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"34f3223a-82df-4d57-89c2-5f76bda8b2a0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-f54KRjc7A2uM1lKN_xQ7gv8wFAOShyoBsD5BbffrpUOymP7zU2A7tDF49qpk"} {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"34f3223a-82df-4d57-89c2-5f76bda8b2a0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3b0a18.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-f54KRjc7A2uM1lKN_xQ7gv8wFAOShyoBsD5BbffrpUOymP7zU2A7tDF49qpk\"}"} {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"34f3223a-82df-4d57-89c2-5f76bda8b2a0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3b0a18.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4542c47d-8b96-4a1b-898c-af8b35b26da0","keyName":"e2e-sub-iso-aabb76","subscription":"e2e-shared-sub-4c0533","tenant":"e2e-shared-a-3b0a18","userId":"4542c47d-8b96-4a1b-898c-af8b35b26da0","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"34f3223a-82df-4d57-89c2-5f76bda8b2a0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34f3223a-82df-4d57-89c2-5f76bda8b2a0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34f3223a-82df-4d57-89c2-5f76bda8b2a0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34f3223a-82df-4d57-89c2-5f76bda8b2a0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3b0a18/sub-test-model-3b0a18\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34f3223a-82df-4d57-89c2-5f76bda8b2a0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"34f3223a-82df-4d57-89c2-5f76bda8b2a0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34f3223a-82df-4d57-89c2-5f76bda8b2a0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-4c0533"} {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34f3223a-82df-4d57-89c2-5f76bda8b2a0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34f3223a-82df-4d57-89c2-5f76bda8b2a0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34f3223a-82df-4d57-89c2-5f76bda8b2a0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d08ec4e4-175c-401e-9152-ad14d8d3d4b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:32796","PortSpecifier":{"PortValue":32796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d08ec4e4-175c-401e-9152-ad14d8d3d4b4","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d08ec4e4-175c-401e-9152-ad14d8d3d4b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:32796","PortSpecifier":{"PortValue":32796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783361843,"nanos":136984340},"http":{"id":"d08ec4e4-175c-401e-9152-ad14d8d3d4b4","method":"POST","headers":{":authority":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d08ec4e4-175c-401e-9152-ad14d8d3d4b4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-efA7OTHcLKxriUUP_umpBZ8gyGxDjGZ1QgukUyKq6hTJR63dfzHDn9j8DQNb"} {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d08ec4e4-175c-401e-9152-ad14d8d3d4b4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-a0e97d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-efA7OTHcLKxriUUP_umpBZ8gyGxDjGZ1QgukUyKq6hTJR63dfzHDn9j8DQNb\"}"} {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d08ec4e4-175c-401e-9152-ad14d8d3d4b4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a0e97d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"08e445ee-e5a1-4a1a-ace5-2ca0468e4fb5","keyName":"e2e-sub-iso-90c8ce","subscription":"e2e-shared-sub-4c0533","tenant":"e2e-shared-b-a0e97d","userId":"08e445ee-e5a1-4a1a-ace5-2ca0468e4fb5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d08ec4e4-175c-401e-9152-ad14d8d3d4b4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d08ec4e4-175c-401e-9152-ad14d8d3d4b4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d08ec4e4-175c-401e-9152-ad14d8d3d4b4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d08ec4e4-175c-401e-9152-ad14d8d3d4b4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a0e97d/sub-test-model-a0e97d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d08ec4e4-175c-401e-9152-ad14d8d3d4b4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d08ec4e4-175c-401e-9152-ad14d8d3d4b4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d08ec4e4-175c-401e-9152-ad14d8d3d4b4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-4c0533"} {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d08ec4e4-175c-401e-9152-ad14d8d3d4b4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d08ec4e4-175c-401e-9152-ad14d8d3d4b4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:17:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d08ec4e4-175c-401e-9152-ad14d8d3d4b4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:17:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0e10c655ddec0f0e35f0dc700c936b08893bbcf07ca39119da05438776dd951"} {"level":"info","ts":"2026-07-06T18:17:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d336d35b4dc2534d22eb74e166bb09558f77c04f63a04d85114b920247b1a3e"} {"level":"info","ts":"2026-07-06T18:17:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b51e9ab2b371c884b9f6cb6c592f199db3819bf5580c20cb1deb87acd3c1b957"} {"level":"info","ts":"2026-07-06T18:17:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d45a87cff8d9ff165410671e68e97bfbe51d75dda8f946ccb36c68e2187ba15a"} {"level":"info","ts":"2026-07-06T18:17:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac57a793ecf3676f10f198fd2e12f2de9d0e5758d9f482772638062ed31facad"} {"level":"info","ts":"2026-07-06T18:17:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57197080db01fae3e264658cbb3cc25694117e6ea051347b4c7483680cc21023"} {"level":"info","ts":"2026-07-06T18:17:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78c36675000ae720ed11f624755c59f53b209afd4ee110f278a6b92aa073f194"} {"level":"info","ts":"2026-07-06T18:17:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf9326537855db441faddfffe864724ce5c261dfd9938be719d2a630ab88c104"} {"level":"info","ts":"2026-07-06T18:17:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a388d92bd72a802a473a030ec79a64330ca88a3bdea963a1efca4f54481d6a56"} {"level":"info","ts":"2026-07-06T18:17:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a80d9577b901694344875463de8e7959aa89be58e1e346dc0130efaf3a56440"} {"level":"info","ts":"2026-07-06T18:17:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/312937964416229edc81e1fc25b4811616670e27983989ff94d81be39c9e1faf"} {"level":"info","ts":"2026-07-06T18:17:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be19c63794d8a3a0a2819d072b2a745a7bb5785f7ced60d0b69fe709416f6b12"} {"level":"info","ts":"2026-07-06T18:17:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ceddb0904fedae45379cd62a17f02cdfafc7a740c9d9749d1133a4e506314225"} {"level":"info","ts":"2026-07-06T18:17:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd311a725f2d5854900795c46bf04caccfdd3bd5acfd1f77515cf8053ae67392"} {"level":"info","ts":"2026-07-06T18:17:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5747b57b4823c60f38df60db8ea954df4548deb92bf957747e8d96b258f3263f"} {"level":"info","ts":"2026-07-06T18:17:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76135ba16343165699eea4fabc934e48dfe09ed961af983d1b251936b7c52f9e"} {"level":"debug","ts":"2026-07-06T18:17:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125"} {"level":"debug","ts":"2026-07-06T18:17:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125"} {"level":"debug","ts":"2026-07-06T18:17:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:17:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:17:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125"} {"level":"debug","ts":"2026-07-06T18:17:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125"} {"level":"debug","ts":"2026-07-06T18:17:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:17:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:17:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125"} {"level":"debug","ts":"2026-07-06T18:17:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125"} {"level":"debug","ts":"2026-07-06T18:17:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:17:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:17:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125"} {"level":"debug","ts":"2026-07-06T18:17:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125"} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0de34b989932dbc3e3da29a1f0afeb20448b601a7f83496494cf53b517fe6ecd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125"} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0de34b989932dbc3e3da29a1f0afeb20448b601a7f83496494cf53b517fe6ecd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0de34b989932dbc3e3da29a1f0afeb20448b601a7f83496494cf53b517fe6ecd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0de34b989932dbc3e3da29a1f0afeb20448b601a7f83496494cf53b517fe6ecd"} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0de34b989932dbc3e3da29a1f0afeb20448b601a7f83496494cf53b517fe6ecd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0de34b989932dbc3e3da29a1f0afeb20448b601a7f83496494cf53b517fe6ecd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0de34b989932dbc3e3da29a1f0afeb20448b601a7f83496494cf53b517fe6ecd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0de34b989932dbc3e3da29a1f0afeb20448b601a7f83496494cf53b517fe6ecd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0de34b989932dbc3e3da29a1f0afeb20448b601a7f83496494cf53b517fe6ecd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0de34b989932dbc3e3da29a1f0afeb20448b601a7f83496494cf53b517fe6ecd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0de34b989932dbc3e3da29a1f0afeb20448b601a7f83496494cf53b517fe6ecd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0de34b989932dbc3e3da29a1f0afeb20448b601a7f83496494cf53b517fe6ecd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0de34b989932dbc3e3da29a1f0afeb20448b601a7f83496494cf53b517fe6ecd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0de34b989932dbc3e3da29a1f0afeb20448b601a7f83496494cf53b517fe6ecd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125"} {"level":"error","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0de34b989932dbc3e3da29a1f0afeb20448b601a7f83496494cf53b517fe6ecd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0de34b989932dbc3e3da29a1f0afeb20448b601a7f83496494cf53b517fe6ecd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0de34b989932dbc3e3da29a1f0afeb20448b601a7f83496494cf53b517fe6ecd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0de34b989932dbc3e3da29a1f0afeb20448b601a7f83496494cf53b517fe6ecd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0de34b989932dbc3e3da29a1f0afeb20448b601a7f83496494cf53b517fe6ecd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0de34b989932dbc3e3da29a1f0afeb20448b601a7f83496494cf53b517fe6ecd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0de34b989932dbc3e3da29a1f0afeb20448b601a7f83496494cf53b517fe6ecd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0de34b989932dbc3e3da29a1f0afeb20448b601a7f83496494cf53b517fe6ecd"} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0de34b989932dbc3e3da29a1f0afeb20448b601a7f83496494cf53b517fe6ecd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0de34b989932dbc3e3da29a1f0afeb20448b601a7f83496494cf53b517fe6ecd"} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84818204426f30f9ce4f8d370f9529ffd8ec7fbf68908805645fead97fc4fb47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84818204426f30f9ce4f8d370f9529ffd8ec7fbf68908805645fead97fc4fb47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84818204426f30f9ce4f8d370f9529ffd8ec7fbf68908805645fead97fc4fb47","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125"} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84818204426f30f9ce4f8d370f9529ffd8ec7fbf68908805645fead97fc4fb47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84818204426f30f9ce4f8d370f9529ffd8ec7fbf68908805645fead97fc4fb47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0de34b989932dbc3e3da29a1f0afeb20448b601a7f83496494cf53b517fe6ecd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0de34b989932dbc3e3da29a1f0afeb20448b601a7f83496494cf53b517fe6ecd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84818204426f30f9ce4f8d370f9529ffd8ec7fbf68908805645fead97fc4fb47"} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0de34b989932dbc3e3da29a1f0afeb20448b601a7f83496494cf53b517fe6ecd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84818204426f30f9ce4f8d370f9529ffd8ec7fbf68908805645fead97fc4fb47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0de34b989932dbc3e3da29a1f0afeb20448b601a7f83496494cf53b517fe6ecd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84818204426f30f9ce4f8d370f9529ffd8ec7fbf68908805645fead97fc4fb47","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84818204426f30f9ce4f8d370f9529ffd8ec7fbf68908805645fead97fc4fb47"} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0de34b989932dbc3e3da29a1f0afeb20448b601a7f83496494cf53b517fe6ecd"} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643"} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84818204426f30f9ce4f8d370f9529ffd8ec7fbf68908805645fead97fc4fb47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84818204426f30f9ce4f8d370f9529ffd8ec7fbf68908805645fead97fc4fb47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643"} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84818204426f30f9ce4f8d370f9529ffd8ec7fbf68908805645fead97fc4fb47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84818204426f30f9ce4f8d370f9529ffd8ec7fbf68908805645fead97fc4fb47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84818204426f30f9ce4f8d370f9529ffd8ec7fbf68908805645fead97fc4fb47"} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84818204426f30f9ce4f8d370f9529ffd8ec7fbf68908805645fead97fc4fb47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84818204426f30f9ce4f8d370f9529ffd8ec7fbf68908805645fead97fc4fb47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84818204426f30f9ce4f8d370f9529ffd8ec7fbf68908805645fead97fc4fb47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643"} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84818204426f30f9ce4f8d370f9529ffd8ec7fbf68908805645fead97fc4fb47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84818204426f30f9ce4f8d370f9529ffd8ec7fbf68908805645fead97fc4fb47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84818204426f30f9ce4f8d370f9529ffd8ec7fbf68908805645fead97fc4fb47"} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84818204426f30f9ce4f8d370f9529ffd8ec7fbf68908805645fead97fc4fb47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84818204426f30f9ce4f8d370f9529ffd8ec7fbf68908805645fead97fc4fb47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84818204426f30f9ce4f8d370f9529ffd8ec7fbf68908805645fead97fc4fb47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643"} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84818204426f30f9ce4f8d370f9529ffd8ec7fbf68908805645fead97fc4fb47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84818204426f30f9ce4f8d370f9529ffd8ec7fbf68908805645fead97fc4fb47"} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84818204426f30f9ce4f8d370f9529ffd8ec7fbf68908805645fead97fc4fb47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643"} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8607aaab0d61bc52ae27f160a56454b02029f45e607738092aaa292e68861bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84818204426f30f9ce4f8d370f9529ffd8ec7fbf68908805645fead97fc4fb47"} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8607aaab0d61bc52ae27f160a56454b02029f45e607738092aaa292e68861bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8607aaab0d61bc52ae27f160a56454b02029f45e607738092aaa292e68861bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643"} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8607aaab0d61bc52ae27f160a56454b02029f45e607738092aaa292e68861bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8607aaab0d61bc52ae27f160a56454b02029f45e607738092aaa292e68861bb"} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8607aaab0d61bc52ae27f160a56454b02029f45e607738092aaa292e68861bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8607aaab0d61bc52ae27f160a56454b02029f45e607738092aaa292e68861bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8607aaab0d61bc52ae27f160a56454b02029f45e607738092aaa292e68861bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643"} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8607aaab0d61bc52ae27f160a56454b02029f45e607738092aaa292e68861bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8607aaab0d61bc52ae27f160a56454b02029f45e607738092aaa292e68861bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8607aaab0d61bc52ae27f160a56454b02029f45e607738092aaa292e68861bb"} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8607aaab0d61bc52ae27f160a56454b02029f45e607738092aaa292e68861bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643"} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8607aaab0d61bc52ae27f160a56454b02029f45e607738092aaa292e68861bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8607aaab0d61bc52ae27f160a56454b02029f45e607738092aaa292e68861bb"} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8607aaab0d61bc52ae27f160a56454b02029f45e607738092aaa292e68861bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8607aaab0d61bc52ae27f160a56454b02029f45e607738092aaa292e68861bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8607aaab0d61bc52ae27f160a56454b02029f45e607738092aaa292e68861bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643"} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8607aaab0d61bc52ae27f160a56454b02029f45e607738092aaa292e68861bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8607aaab0d61bc52ae27f160a56454b02029f45e607738092aaa292e68861bb"} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8607aaab0d61bc52ae27f160a56454b02029f45e607738092aaa292e68861bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8607aaab0d61bc52ae27f160a56454b02029f45e607738092aaa292e68861bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8607aaab0d61bc52ae27f160a56454b02029f45e607738092aaa292e68861bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8607aaab0d61bc52ae27f160a56454b02029f45e607738092aaa292e68861bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8607aaab0d61bc52ae27f160a56454b02029f45e607738092aaa292e68861bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8607aaab0d61bc52ae27f160a56454b02029f45e607738092aaa292e68861bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b8607aaab0d61bc52ae27f160a56454b02029f45e607738092aaa292e68861bb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b8607aaab0d61bc52ae27f160a56454b02029f45e607738092aaa292e68861bb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8607aaab0d61bc52ae27f160a56454b02029f45e607738092aaa292e68861bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8607aaab0d61bc52ae27f160a56454b02029f45e607738092aaa292e68861bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643"} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8607aaab0d61bc52ae27f160a56454b02029f45e607738092aaa292e68861bb"} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643"} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6f856168531676c3d99acf397095047d8d84007ef3a6d7ade892cb1af8f730f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6f856168531676c3d99acf397095047d8d84007ef3a6d7ade892cb1af8f730f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6f856168531676c3d99acf397095047d8d84007ef3a6d7ade892cb1af8f730f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6f856168531676c3d99acf397095047d8d84007ef3a6d7ade892cb1af8f730f"} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6f856168531676c3d99acf397095047d8d84007ef3a6d7ade892cb1af8f730f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6f856168531676c3d99acf397095047d8d84007ef3a6d7ade892cb1af8f730f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c6f856168531676c3d99acf397095047d8d84007ef3a6d7ade892cb1af8f730f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c6f856168531676c3d99acf397095047d8d84007ef3a6d7ade892cb1af8f730f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6f856168531676c3d99acf397095047d8d84007ef3a6d7ade892cb1af8f730f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6f856168531676c3d99acf397095047d8d84007ef3a6d7ade892cb1af8f730f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6f856168531676c3d99acf397095047d8d84007ef3a6d7ade892cb1af8f730f"} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6f856168531676c3d99acf397095047d8d84007ef3a6d7ade892cb1af8f730f"} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be91919ff6edabc2d610922df2039a4dbbe3a446eb8f8f4dcad2030d76825978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be91919ff6edabc2d610922df2039a4dbbe3a446eb8f8f4dcad2030d76825978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be91919ff6edabc2d610922df2039a4dbbe3a446eb8f8f4dcad2030d76825978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be91919ff6edabc2d610922df2039a4dbbe3a446eb8f8f4dcad2030d76825978"} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be91919ff6edabc2d610922df2039a4dbbe3a446eb8f8f4dcad2030d76825978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6f856168531676c3d99acf397095047d8d84007ef3a6d7ade892cb1af8f730f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:17:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6f856168531676c3d99acf397095047d8d84007ef3a6d7ade892cb1af8f730f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6f856168531676c3d99acf397095047d8d84007ef3a6d7ade892cb1af8f730f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be91919ff6edabc2d610922df2039a4dbbe3a446eb8f8f4dcad2030d76825978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6f856168531676c3d99acf397095047d8d84007ef3a6d7ade892cb1af8f730f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be91919ff6edabc2d610922df2039a4dbbe3a446eb8f8f4dcad2030d76825978"} {"level":"debug","ts":"2026-07-06T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be91919ff6edabc2d610922df2039a4dbbe3a446eb8f8f4dcad2030d76825978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:17:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:17:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be91919ff6edabc2d610922df2039a4dbbe3a446eb8f8f4dcad2030d76825978"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6f856168531676c3d99acf397095047d8d84007ef3a6d7ade892cb1af8f730f"} {"level":"info","ts":"2026-07-06T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be91919ff6edabc2d610922df2039a4dbbe3a446eb8f8f4dcad2030d76825978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be91919ff6edabc2d610922df2039a4dbbe3a446eb8f8f4dcad2030d76825978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be91919ff6edabc2d610922df2039a4dbbe3a446eb8f8f4dcad2030d76825978"} {"level":"info","ts":"2026-07-06T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be91919ff6edabc2d610922df2039a4dbbe3a446eb8f8f4dcad2030d76825978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be91919ff6edabc2d610922df2039a4dbbe3a446eb8f8f4dcad2030d76825978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be91919ff6edabc2d610922df2039a4dbbe3a446eb8f8f4dcad2030d76825978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f601441289790bbb3055f131547af703595365ced6f9d7f4b3e271c9efbaa37c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be91919ff6edabc2d610922df2039a4dbbe3a446eb8f8f4dcad2030d76825978"} {"level":"info","ts":"2026-07-06T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f601441289790bbb3055f131547af703595365ced6f9d7f4b3e271c9efbaa37c"} {"level":"info","ts":"2026-07-06T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f601441289790bbb3055f131547af703595365ced6f9d7f4b3e271c9efbaa37c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be91919ff6edabc2d610922df2039a4dbbe3a446eb8f8f4dcad2030d76825978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f601441289790bbb3055f131547af703595365ced6f9d7f4b3e271c9efbaa37c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:17:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:17:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f601441289790bbb3055f131547af703595365ced6f9d7f4b3e271c9efbaa37c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be91919ff6edabc2d610922df2039a4dbbe3a446eb8f8f4dcad2030d76825978"} {"level":"info","ts":"2026-07-06T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f601441289790bbb3055f131547af703595365ced6f9d7f4b3e271c9efbaa37c"} {"level":"info","ts":"2026-07-06T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f601441289790bbb3055f131547af703595365ced6f9d7f4b3e271c9efbaa37c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be91919ff6edabc2d610922df2039a4dbbe3a446eb8f8f4dcad2030d76825978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:17:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:17:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be91919ff6edabc2d610922df2039a4dbbe3a446eb8f8f4dcad2030d76825978"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f601441289790bbb3055f131547af703595365ced6f9d7f4b3e271c9efbaa37c"} {"level":"info","ts":"2026-07-06T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be91919ff6edabc2d610922df2039a4dbbe3a446eb8f8f4dcad2030d76825978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f601441289790bbb3055f131547af703595365ced6f9d7f4b3e271c9efbaa37c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be91919ff6edabc2d610922df2039a4dbbe3a446eb8f8f4dcad2030d76825978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:17:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:17:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be91919ff6edabc2d610922df2039a4dbbe3a446eb8f8f4dcad2030d76825978"} {"level":"info","ts":"2026-07-06T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be91919ff6edabc2d610922df2039a4dbbe3a446eb8f8f4dcad2030d76825978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be91919ff6edabc2d610922df2039a4dbbe3a446eb8f8f4dcad2030d76825978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be91919ff6edabc2d610922df2039a4dbbe3a446eb8f8f4dcad2030d76825978","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be91919ff6edabc2d610922df2039a4dbbe3a446eb8f8f4dcad2030d76825978"} {"level":"debug","ts":"2026-07-06T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be91919ff6edabc2d610922df2039a4dbbe3a446eb8f8f4dcad2030d76825978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:17:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:17:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be91919ff6edabc2d610922df2039a4dbbe3a446eb8f8f4dcad2030d76825978"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be91919ff6edabc2d610922df2039a4dbbe3a446eb8f8f4dcad2030d76825978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be91919ff6edabc2d610922df2039a4dbbe3a446eb8f8f4dcad2030d76825978","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be91919ff6edabc2d610922df2039a4dbbe3a446eb8f8f4dcad2030d76825978"} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92500ce09789839f307b2b986a813a1d2591d2a0e4926e158b3c662f23e2a4dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92500ce09789839f307b2b986a813a1d2591d2a0e4926e158b3c662f23e2a4dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92500ce09789839f307b2b986a813a1d2591d2a0e4926e158b3c662f23e2a4dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92500ce09789839f307b2b986a813a1d2591d2a0e4926e158b3c662f23e2a4dd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92500ce09789839f307b2b986a813a1d2591d2a0e4926e158b3c662f23e2a4dd"} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92500ce09789839f307b2b986a813a1d2591d2a0e4926e158b3c662f23e2a4dd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92500ce09789839f307b2b986a813a1d2591d2a0e4926e158b3c662f23e2a4dd"} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92500ce09789839f307b2b986a813a1d2591d2a0e4926e158b3c662f23e2a4dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92500ce09789839f307b2b986a813a1d2591d2a0e4926e158b3c662f23e2a4dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92500ce09789839f307b2b986a813a1d2591d2a0e4926e158b3c662f23e2a4dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92500ce09789839f307b2b986a813a1d2591d2a0e4926e158b3c662f23e2a4dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92500ce09789839f307b2b986a813a1d2591d2a0e4926e158b3c662f23e2a4dd"} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e"} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e"} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a"} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a"} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e"} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a"} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e"} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a"} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e"} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a"} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e"} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a"} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e"} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a"} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae896bb24ff37eac12f9c824ef505994fb4e29a7cdb02cf6961f5d4ca7193c64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae896bb24ff37eac12f9c824ef505994fb4e29a7cdb02cf6961f5d4ca7193c64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb449ea5057e143b927857d97347ff1f5c24f908741d82800d00dc61b8de8f93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e"} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb449ea5057e143b927857d97347ff1f5c24f908741d82800d00dc61b8de8f93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae896bb24ff37eac12f9c824ef505994fb4e29a7cdb02cf6961f5d4ca7193c64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb449ea5057e143b927857d97347ff1f5c24f908741d82800d00dc61b8de8f93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae896bb24ff37eac12f9c824ef505994fb4e29a7cdb02cf6961f5d4ca7193c64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a"} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb449ea5057e143b927857d97347ff1f5c24f908741d82800d00dc61b8de8f93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae896bb24ff37eac12f9c824ef505994fb4e29a7cdb02cf6961f5d4ca7193c64"} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae896bb24ff37eac12f9c824ef505994fb4e29a7cdb02cf6961f5d4ca7193c64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae896bb24ff37eac12f9c824ef505994fb4e29a7cdb02cf6961f5d4ca7193c64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae896bb24ff37eac12f9c824ef505994fb4e29a7cdb02cf6961f5d4ca7193c64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb449ea5057e143b927857d97347ff1f5c24f908741d82800d00dc61b8de8f93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb449ea5057e143b927857d97347ff1f5c24f908741d82800d00dc61b8de8f93"} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb449ea5057e143b927857d97347ff1f5c24f908741d82800d00dc61b8de8f93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae896bb24ff37eac12f9c824ef505994fb4e29a7cdb02cf6961f5d4ca7193c64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb449ea5057e143b927857d97347ff1f5c24f908741d82800d00dc61b8de8f93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb449ea5057e143b927857d97347ff1f5c24f908741d82800d00dc61b8de8f93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e"} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb449ea5057e143b927857d97347ff1f5c24f908741d82800d00dc61b8de8f93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb449ea5057e143b927857d97347ff1f5c24f908741d82800d00dc61b8de8f93","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a"} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb449ea5057e143b927857d97347ff1f5c24f908741d82800d00dc61b8de8f93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c"} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae896bb24ff37eac12f9c824ef505994fb4e29a7cdb02cf6961f5d4ca7193c64"} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb449ea5057e143b927857d97347ff1f5c24f908741d82800d00dc61b8de8f93"} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c"} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c"} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c"} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c"} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482"} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482"} {"level":"debug","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c"} {"level":"info","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482"} {"level":"debug","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482"} {"level":"debug","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482"} {"level":"debug","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482"} {"level":"debug","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9"} {"level":"info","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9"} {"level":"debug","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482"} {"level":"info","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9"} {"level":"debug","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9"} {"level":"debug","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9"} {"level":"debug","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9"} {"level":"debug","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9"} {"level":"debug","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9"} {"level":"debug","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9"} {"level":"debug","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9"} {"level":"debug","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9"} {"level":"debug","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9"} {"level":"debug","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9"} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e"} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e"} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92500ce09789839f307b2b986a813a1d2591d2a0e4926e158b3c662f23e2a4dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e"} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92500ce09789839f307b2b986a813a1d2591d2a0e4926e158b3c662f23e2a4dd"} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e"} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e"} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125"} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e"} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145"} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145"} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8607aaab0d61bc52ae27f160a56454b02029f45e607738092aaa292e68861bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145"} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8607aaab0d61bc52ae27f160a56454b02029f45e607738092aaa292e68861bb"} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145"} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145"} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643"} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145"} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145"} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be91919ff6edabc2d610922df2039a4dbbe3a446eb8f8f4dcad2030d76825978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f601441289790bbb3055f131547af703595365ced6f9d7f4b3e271c9efbaa37c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be91919ff6edabc2d610922df2039a4dbbe3a446eb8f8f4dcad2030d76825978"} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f601441289790bbb3055f131547af703595365ced6f9d7f4b3e271c9efbaa37c"} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145"} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84818204426f30f9ce4f8d370f9529ffd8ec7fbf68908805645fead97fc4fb47","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482"} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4dff02adbbe53f4e055bc4b4742ac0dad7b268fb4b8aeb907280eba11e2a6d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84818204426f30f9ce4f8d370f9529ffd8ec7fbf68908805645fead97fc4fb47"} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482"} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4dff02adbbe53f4e055bc4b4742ac0dad7b268fb4b8aeb907280eba11e2a6d7"} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a"} {"level":"debug","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6f856168531676c3d99acf397095047d8d84007ef3a6d7ade892cb1af8f730f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482"} {"level":"info","ts":"2026-07-06T18:18:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9"} {"level":"info","ts":"2026-07-06T18:18:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6f856168531676c3d99acf397095047d8d84007ef3a6d7ade892cb1af8f730f"} {"level":"debug","ts":"2026-07-06T18:18:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"671856ca9175d3dac06f078fc4ca2c853ae4308a64c3f38aa01605cfcefe78df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c"} {"level":"debug","ts":"2026-07-06T18:18:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0de34b989932dbc3e3da29a1f0afeb20448b601a7f83496494cf53b517fe6ecd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/671856ca9175d3dac06f078fc4ca2c853ae4308a64c3f38aa01605cfcefe78df"} {"level":"info","ts":"2026-07-06T18:18:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c"} {"level":"debug","ts":"2026-07-06T18:18:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T18:18:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T18:18:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0de34b989932dbc3e3da29a1f0afeb20448b601a7f83496494cf53b517fe6ecd"} {"level":"debug","ts":"2026-07-06T18:18:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae896bb24ff37eac12f9c824ef505994fb4e29a7cdb02cf6961f5d4ca7193c64","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"} {"level":"debug","ts":"2026-07-06T18:18:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb449ea5057e143b927857d97347ff1f5c24f908741d82800d00dc61b8de8f93","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c"} {"level":"info","ts":"2026-07-06T18:18:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae896bb24ff37eac12f9c824ef505994fb4e29a7cdb02cf6961f5d4ca7193c64"} {"level":"info","ts":"2026-07-06T18:18:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb449ea5057e143b927857d97347ff1f5c24f908741d82800d00dc61b8de8f93"} {"level":"info","ts":"2026-07-06T18:18:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9ffc15e3-6050-4ad2-ae56-e5d287cb032b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37220","PortSpecifier":{"PortValue":37220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9ffc15e3-6050-4ad2-ae56-e5d287cb032b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:18:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9ffc15e3-6050-4ad2-ae56-e5d287cb032b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37220","PortSpecifier":{"PortValue":37220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783361923,"nanos":870118602},"http":{"id":"9ffc15e3-6050-4ad2-ae56-e5d287cb032b","method":"POST","headers":{":authority":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:18:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9ffc15e3-6050-4ad2-ae56-e5d287cb032b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:18:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9ffc15e3-6050-4ad2-ae56-e5d287cb032b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"]}} {"level":"debug","ts":"2026-07-06T18:18:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9ffc15e3-6050-4ad2-ae56-e5d287cb032b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:18:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ffc15e3-6050-4ad2-ae56-e5d287cb032b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:18:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ffc15e3-6050-4ad2-ae56-e5d287cb032b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:18:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ffc15e3-6050-4ad2-ae56-e5d287cb032b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3b0a18/rate-test-model-3b0a18\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:18:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9ffc15e3-6050-4ad2-ae56-e5d287cb032b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:18:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ffc15e3-6050-4ad2-ae56-e5d287cb032b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:18:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ffc15e3-6050-4ad2-ae56-e5d287cb032b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:18:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9ffc15e3-6050-4ad2-ae56-e5d287cb032b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:18:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9ffc15e3-6050-4ad2-ae56-e5d287cb032b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:18:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1cfecef-bed2-4563-a087-e17d9b85d32d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:45200","PortSpecifier":{"PortValue":45200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e1cfecef-bed2-4563-a087-e17d9b85d32d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:18:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1cfecef-bed2-4563-a087-e17d9b85d32d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:45200","PortSpecifier":{"PortValue":45200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783361923,"nanos":915256733},"http":{"id":"e1cfecef-bed2-4563-a087-e17d9b85d32d","method":"POST","headers":{":authority":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:18:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e1cfecef-bed2-4563-a087-e17d9b85d32d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:18:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e1cfecef-bed2-4563-a087-e17d9b85d32d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"]}} {"level":"debug","ts":"2026-07-06T18:18:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e1cfecef-bed2-4563-a087-e17d9b85d32d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:18:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1cfecef-bed2-4563-a087-e17d9b85d32d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:18:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1cfecef-bed2-4563-a087-e17d9b85d32d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:18:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1cfecef-bed2-4563-a087-e17d9b85d32d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a0e97d/rate-test-model-a0e97d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:18:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e1cfecef-bed2-4563-a087-e17d9b85d32d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:18:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1cfecef-bed2-4563-a087-e17d9b85d32d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:18:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1cfecef-bed2-4563-a087-e17d9b85d32d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T18:18:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1cfecef-bed2-4563-a087-e17d9b85d32d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:18:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1cfecef-bed2-4563-a087-e17d9b85d32d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:18:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7b2f6834-d091-4e5e-acd0-1007f2dc3a37","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37222","PortSpecifier":{"PortValue":37222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7b2f6834-d091-4e5e-acd0-1007f2dc3a37","method":"POST","path":"/ai-tenant-e2e-shared-a-3b0a18/rate-test-model-3b0a18/v1/completions","host":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:18:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7b2f6834-d091-4e5e-acd0-1007f2dc3a37","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37222","PortSpecifier":{"PortValue":37222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783361923,"nanos":956468336},"http":{"id":"7b2f6834-d091-4e5e-acd0-1007f2dc3a37","method":"POST","headers":{":authority":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3b0a18/rate-test-model-3b0a18/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:18:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7b2f6834-d091-4e5e-acd0-1007f2dc3a37","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ATZ1pd4dyvlCaNMJ_ULRxb6mQHwctKcPBqDetHa3NWCcUnuMhcb8I7RiG0MY"} {"level":"debug","ts":"2026-07-06T18:18:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7b2f6834-d091-4e5e-acd0-1007f2dc3a37","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3b0a18.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ATZ1pd4dyvlCaNMJ_ULRxb6mQHwctKcPBqDetHa3NWCcUnuMhcb8I7RiG0MY\"}"} {"level":"debug","ts":"2026-07-06T18:18:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7b2f6834-d091-4e5e-acd0-1007f2dc3a37","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3b0a18.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9ff25a39-626e-4622-b80d-ddc3f9a84efe","keyName":"e2e-rate-a-3574a2","subscription":"e2e-rate-iso-a-3574a2","tenant":"e2e-shared-a-3b0a18","userId":"9ff25a39-626e-4622-b80d-ddc3f9a84efe","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T18:18:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7b2f6834-d091-4e5e-acd0-1007f2dc3a37","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3b0a18.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3b0a18/rate-test-model-3b0a18\",\"requestedSubscription\":\"e2e-rate-iso-a-3574a2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T18:18:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7b2f6834-d091-4e5e-acd0-1007f2dc3a37","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3b0a18.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3b0a18","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3574a2","namespace":"ai-tenant-e2e-shared-a-3b0a18","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T18:18:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7b2f6834-d091-4e5e-acd0-1007f2dc3a37","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:18:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b2f6834-d091-4e5e-acd0-1007f2dc3a37","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:18:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b2f6834-d091-4e5e-acd0-1007f2dc3a37","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:18:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b2f6834-d091-4e5e-acd0-1007f2dc3a37","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3b0a18/rate-test-model-3b0a18\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:18:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b2f6834-d091-4e5e-acd0-1007f2dc3a37","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:18:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b2f6834-d091-4e5e-acd0-1007f2dc3a37","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:18:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b2f6834-d091-4e5e-acd0-1007f2dc3a37","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3574a2"} {"level":"debug","ts":"2026-07-06T18:18:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b2f6834-d091-4e5e-acd0-1007f2dc3a37","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:18:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b2f6834-d091-4e5e-acd0-1007f2dc3a37","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9ff25a39-626e-4622-b80d-ddc3f9a84efe","keyName":"e2e-rate-a-3574a2","selected_subscription":"e2e-rate-iso-a-3574a2","selected_subscription_key":"ai-tenant-e2e-shared-a-3b0a18/e2e-rate-iso-a-3574a2@ai-tenant-e2e-shared-a-3b0a18/rate-test-model-3b0a18","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3b0a18","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3574a2","namespace":"ai-tenant-e2e-shared-a-3b0a18","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T18:18:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7b2f6834-d091-4e5e-acd0-1007f2dc3a37","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:18:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7b2f6834-d091-4e5e-acd0-1007f2dc3a37","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:18:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df07fcb5-1787-4be8-a5fc-c4232a70ff3e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37228","PortSpecifier":{"PortValue":37228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"df07fcb5-1787-4be8-a5fc-c4232a70ff3e","method":"POST","path":"/ai-tenant-e2e-shared-a-3b0a18/rate-test-model-3b0a18/v1/completions","host":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:18:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df07fcb5-1787-4be8-a5fc-c4232a70ff3e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37228","PortSpecifier":{"PortValue":37228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783361925,"nanos":22190137},"http":{"id":"df07fcb5-1787-4be8-a5fc-c4232a70ff3e","method":"POST","headers":{":authority":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3b0a18/rate-test-model-3b0a18/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:18:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"df07fcb5-1787-4be8-a5fc-c4232a70ff3e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ATZ1pd4dyvlCaNMJ_ULRxb6mQHwctKcPBqDetHa3NWCcUnuMhcb8I7RiG0MY"} {"level":"debug","ts":"2026-07-06T18:18:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"df07fcb5-1787-4be8-a5fc-c4232a70ff3e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3b0a18.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ATZ1pd4dyvlCaNMJ_ULRxb6mQHwctKcPBqDetHa3NWCcUnuMhcb8I7RiG0MY\"}"} {"level":"debug","ts":"2026-07-06T18:18:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"df07fcb5-1787-4be8-a5fc-c4232a70ff3e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3b0a18.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9ff25a39-626e-4622-b80d-ddc3f9a84efe","keyName":"e2e-rate-a-3574a2","subscription":"e2e-rate-iso-a-3574a2","tenant":"e2e-shared-a-3b0a18","userId":"9ff25a39-626e-4622-b80d-ddc3f9a84efe","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T18:18:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"df07fcb5-1787-4be8-a5fc-c4232a70ff3e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3b0a18.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3b0a18/rate-test-model-3b0a18\",\"requestedSubscription\":\"e2e-rate-iso-a-3574a2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T18:18:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"df07fcb5-1787-4be8-a5fc-c4232a70ff3e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3b0a18.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3b0a18","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3574a2","namespace":"ai-tenant-e2e-shared-a-3b0a18","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T18:18:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"df07fcb5-1787-4be8-a5fc-c4232a70ff3e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:18:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df07fcb5-1787-4be8-a5fc-c4232a70ff3e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:18:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df07fcb5-1787-4be8-a5fc-c4232a70ff3e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:18:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df07fcb5-1787-4be8-a5fc-c4232a70ff3e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:18:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df07fcb5-1787-4be8-a5fc-c4232a70ff3e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3b0a18/rate-test-model-3b0a18\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:18:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df07fcb5-1787-4be8-a5fc-c4232a70ff3e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3574a2"} {"level":"debug","ts":"2026-07-06T18:18:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df07fcb5-1787-4be8-a5fc-c4232a70ff3e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:18:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df07fcb5-1787-4be8-a5fc-c4232a70ff3e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:18:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df07fcb5-1787-4be8-a5fc-c4232a70ff3e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9ff25a39-626e-4622-b80d-ddc3f9a84efe","keyName":"e2e-rate-a-3574a2","selected_subscription":"e2e-rate-iso-a-3574a2","selected_subscription_key":"ai-tenant-e2e-shared-a-3b0a18/e2e-rate-iso-a-3574a2@ai-tenant-e2e-shared-a-3b0a18/rate-test-model-3b0a18","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3b0a18","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3574a2","namespace":"ai-tenant-e2e-shared-a-3b0a18","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T18:18:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df07fcb5-1787-4be8-a5fc-c4232a70ff3e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:18:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df07fcb5-1787-4be8-a5fc-c4232a70ff3e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:18:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c25eb25-fb32-43de-8eb6-79682ce43e18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37236","PortSpecifier":{"PortValue":37236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5c25eb25-fb32-43de-8eb6-79682ce43e18","method":"POST","path":"/ai-tenant-e2e-shared-a-3b0a18/rate-test-model-3b0a18/v1/completions","host":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:18:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c25eb25-fb32-43de-8eb6-79682ce43e18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37236","PortSpecifier":{"PortValue":37236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783361926,"nanos":63046852},"http":{"id":"5c25eb25-fb32-43de-8eb6-79682ce43e18","method":"POST","headers":{":authority":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3b0a18/rate-test-model-3b0a18/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:18:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5c25eb25-fb32-43de-8eb6-79682ce43e18","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ATZ1pd4dyvlCaNMJ_ULRxb6mQHwctKcPBqDetHa3NWCcUnuMhcb8I7RiG0MY"} {"level":"debug","ts":"2026-07-06T18:18:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5c25eb25-fb32-43de-8eb6-79682ce43e18","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3b0a18.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ATZ1pd4dyvlCaNMJ_ULRxb6mQHwctKcPBqDetHa3NWCcUnuMhcb8I7RiG0MY\"}"} {"level":"debug","ts":"2026-07-06T18:18:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5c25eb25-fb32-43de-8eb6-79682ce43e18","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3b0a18.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9ff25a39-626e-4622-b80d-ddc3f9a84efe","keyName":"e2e-rate-a-3574a2","subscription":"e2e-rate-iso-a-3574a2","tenant":"e2e-shared-a-3b0a18","userId":"9ff25a39-626e-4622-b80d-ddc3f9a84efe","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T18:18:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5c25eb25-fb32-43de-8eb6-79682ce43e18","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3b0a18.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3b0a18/rate-test-model-3b0a18\",\"requestedSubscription\":\"e2e-rate-iso-a-3574a2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T18:18:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5c25eb25-fb32-43de-8eb6-79682ce43e18","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3b0a18.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3b0a18","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3574a2","namespace":"ai-tenant-e2e-shared-a-3b0a18","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T18:18:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5c25eb25-fb32-43de-8eb6-79682ce43e18","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:18:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c25eb25-fb32-43de-8eb6-79682ce43e18","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:18:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c25eb25-fb32-43de-8eb6-79682ce43e18","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:18:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c25eb25-fb32-43de-8eb6-79682ce43e18","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3b0a18/rate-test-model-3b0a18\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:18:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c25eb25-fb32-43de-8eb6-79682ce43e18","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:18:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c25eb25-fb32-43de-8eb6-79682ce43e18","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:18:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c25eb25-fb32-43de-8eb6-79682ce43e18","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3574a2"} {"level":"debug","ts":"2026-07-06T18:18:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c25eb25-fb32-43de-8eb6-79682ce43e18","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:18:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c25eb25-fb32-43de-8eb6-79682ce43e18","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9ff25a39-626e-4622-b80d-ddc3f9a84efe","keyName":"e2e-rate-a-3574a2","selected_subscription":"e2e-rate-iso-a-3574a2","selected_subscription_key":"ai-tenant-e2e-shared-a-3b0a18/e2e-rate-iso-a-3574a2@ai-tenant-e2e-shared-a-3b0a18/rate-test-model-3b0a18","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3b0a18","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3574a2","namespace":"ai-tenant-e2e-shared-a-3b0a18","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T18:18:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c25eb25-fb32-43de-8eb6-79682ce43e18","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:18:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c25eb25-fb32-43de-8eb6-79682ce43e18","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:18:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"141d017d-3ffb-4d6e-8491-4bc66674bd04","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57418","PortSpecifier":{"PortValue":57418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"141d017d-3ffb-4d6e-8491-4bc66674bd04","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:18:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"141d017d-3ffb-4d6e-8491-4bc66674bd04","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57418","PortSpecifier":{"PortValue":57418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783361936,"nanos":863984972},"http":{"id":"141d017d-3ffb-4d6e-8491-4bc66674bd04","method":"POST","headers":{":authority":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:18:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"141d017d-3ffb-4d6e-8491-4bc66674bd04","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:18:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"141d017d-3ffb-4d6e-8491-4bc66674bd04","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"]}} {"level":"debug","ts":"2026-07-06T18:18:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"141d017d-3ffb-4d6e-8491-4bc66674bd04","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:18:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"141d017d-3ffb-4d6e-8491-4bc66674bd04","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:18:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"141d017d-3ffb-4d6e-8491-4bc66674bd04","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:18:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"141d017d-3ffb-4d6e-8491-4bc66674bd04","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3b0a18/rate-test-model-3b0a18\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:18:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"141d017d-3ffb-4d6e-8491-4bc66674bd04","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:18:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"141d017d-3ffb-4d6e-8491-4bc66674bd04","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:18:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"141d017d-3ffb-4d6e-8491-4bc66674bd04","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:18:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"141d017d-3ffb-4d6e-8491-4bc66674bd04","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:18:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"141d017d-3ffb-4d6e-8491-4bc66674bd04","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:18:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"422cb4ef-6c51-42a6-acc1-51b4b23bb319","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:44392","PortSpecifier":{"PortValue":44392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"422cb4ef-6c51-42a6-acc1-51b4b23bb319","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:18:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"422cb4ef-6c51-42a6-acc1-51b4b23bb319","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:44392","PortSpecifier":{"PortValue":44392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783361936,"nanos":933423102},"http":{"id":"422cb4ef-6c51-42a6-acc1-51b4b23bb319","method":"POST","headers":{":authority":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:18:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"422cb4ef-6c51-42a6-acc1-51b4b23bb319","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:18:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"422cb4ef-6c51-42a6-acc1-51b4b23bb319","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"]}} {"level":"debug","ts":"2026-07-06T18:18:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"422cb4ef-6c51-42a6-acc1-51b4b23bb319","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c257d7fefca4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b1f56e03-6163-4c9c-927d-a840c55412b2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5db3da58-cc7c-4131-b4b6-c905ae88c913","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:18:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"422cb4ef-6c51-42a6-acc1-51b4b23bb319","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:18:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"422cb4ef-6c51-42a6-acc1-51b4b23bb319","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:18:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"422cb4ef-6c51-42a6-acc1-51b4b23bb319","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a0e97d/rate-test-model-a0e97d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:18:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"422cb4ef-6c51-42a6-acc1-51b4b23bb319","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:18:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"422cb4ef-6c51-42a6-acc1-51b4b23bb319","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:18:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"422cb4ef-6c51-42a6-acc1-51b4b23bb319","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:18:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"422cb4ef-6c51-42a6-acc1-51b4b23bb319","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:18:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"422cb4ef-6c51-42a6-acc1-51b4b23bb319","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:18:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"64ad80a2-afe6-433c-aa55-e8ce5585842b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57424","PortSpecifier":{"PortValue":57424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"64ad80a2-afe6-433c-aa55-e8ce5585842b","method":"POST","path":"/ai-tenant-e2e-shared-a-3b0a18/rate-test-model-3b0a18/v1/completions","host":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:18:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"64ad80a2-afe6-433c-aa55-e8ce5585842b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57424","PortSpecifier":{"PortValue":57424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783361936,"nanos":971834039},"http":{"id":"64ad80a2-afe6-433c-aa55-e8ce5585842b","method":"POST","headers":{":authority":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3b0a18/rate-test-model-3b0a18/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:18:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"64ad80a2-afe6-433c-aa55-e8ce5585842b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1atswwyQDeSsOlfyi_MBpPdp83micVSulR0pK444rPFPxGal1QJ3gAGWq3sqq"} {"level":"debug","ts":"2026-07-06T18:18:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"64ad80a2-afe6-433c-aa55-e8ce5585842b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3b0a18.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1atswwyQDeSsOlfyi_MBpPdp83micVSulR0pK444rPFPxGal1QJ3gAGWq3sqq\"}"} {"level":"debug","ts":"2026-07-06T18:18:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"64ad80a2-afe6-433c-aa55-e8ce5585842b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3b0a18.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5512f964-104b-4969-a8f4-313878e5a271","keyName":"e2e-rate-a-83633f","subscription":"e2e-rate-iso-a-83633f","tenant":"e2e-shared-a-3b0a18","userId":"5512f964-104b-4969-a8f4-313878e5a271","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T18:18:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"64ad80a2-afe6-433c-aa55-e8ce5585842b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3b0a18.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3b0a18/rate-test-model-3b0a18\",\"requestedSubscription\":\"e2e-rate-iso-a-83633f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T18:18:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"64ad80a2-afe6-433c-aa55-e8ce5585842b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3b0a18.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3b0a18","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-83633f","namespace":"ai-tenant-e2e-shared-a-3b0a18","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T18:18:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"64ad80a2-afe6-433c-aa55-e8ce5585842b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:18:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64ad80a2-afe6-433c-aa55-e8ce5585842b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:18:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64ad80a2-afe6-433c-aa55-e8ce5585842b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:18:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64ad80a2-afe6-433c-aa55-e8ce5585842b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:18:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64ad80a2-afe6-433c-aa55-e8ce5585842b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3b0a18/rate-test-model-3b0a18\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:18:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64ad80a2-afe6-433c-aa55-e8ce5585842b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:18:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64ad80a2-afe6-433c-aa55-e8ce5585842b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-83633f"} {"level":"debug","ts":"2026-07-06T18:18:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64ad80a2-afe6-433c-aa55-e8ce5585842b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:18:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64ad80a2-afe6-433c-aa55-e8ce5585842b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5512f964-104b-4969-a8f4-313878e5a271","keyName":"e2e-rate-a-83633f","selected_subscription":"e2e-rate-iso-a-83633f","selected_subscription_key":"ai-tenant-e2e-shared-a-3b0a18/e2e-rate-iso-a-83633f@ai-tenant-e2e-shared-a-3b0a18/rate-test-model-3b0a18","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3b0a18","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-83633f","namespace":"ai-tenant-e2e-shared-a-3b0a18","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T18:18:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"64ad80a2-afe6-433c-aa55-e8ce5585842b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:18:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"64ad80a2-afe6-433c-aa55-e8ce5585842b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:18:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a08a0a85-825b-44ea-8850-b1f20b527496","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57436","PortSpecifier":{"PortValue":57436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a08a0a85-825b-44ea-8850-b1f20b527496","method":"POST","path":"/ai-tenant-e2e-shared-a-3b0a18/rate-test-model-3b0a18/v1/completions","host":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:18:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a08a0a85-825b-44ea-8850-b1f20b527496","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57436","PortSpecifier":{"PortValue":57436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783361938,"nanos":11466936},"http":{"id":"a08a0a85-825b-44ea-8850-b1f20b527496","method":"POST","headers":{":authority":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3b0a18/rate-test-model-3b0a18/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:18:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a08a0a85-825b-44ea-8850-b1f20b527496","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1atswwyQDeSsOlfyi_MBpPdp83micVSulR0pK444rPFPxGal1QJ3gAGWq3sqq"} {"level":"debug","ts":"2026-07-06T18:18:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a08a0a85-825b-44ea-8850-b1f20b527496","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3b0a18.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1atswwyQDeSsOlfyi_MBpPdp83micVSulR0pK444rPFPxGal1QJ3gAGWq3sqq\"}"} {"level":"debug","ts":"2026-07-06T18:18:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a08a0a85-825b-44ea-8850-b1f20b527496","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3b0a18.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5512f964-104b-4969-a8f4-313878e5a271","keyName":"e2e-rate-a-83633f","subscription":"e2e-rate-iso-a-83633f","tenant":"e2e-shared-a-3b0a18","userId":"5512f964-104b-4969-a8f4-313878e5a271","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T18:18:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a08a0a85-825b-44ea-8850-b1f20b527496","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3b0a18.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3b0a18/rate-test-model-3b0a18\",\"requestedSubscription\":\"e2e-rate-iso-a-83633f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T18:18:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a08a0a85-825b-44ea-8850-b1f20b527496","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3b0a18.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3b0a18","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-83633f","namespace":"ai-tenant-e2e-shared-a-3b0a18","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T18:18:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a08a0a85-825b-44ea-8850-b1f20b527496","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:18:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a08a0a85-825b-44ea-8850-b1f20b527496","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:18:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a08a0a85-825b-44ea-8850-b1f20b527496","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:18:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a08a0a85-825b-44ea-8850-b1f20b527496","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3b0a18/rate-test-model-3b0a18\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:18:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a08a0a85-825b-44ea-8850-b1f20b527496","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:18:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a08a0a85-825b-44ea-8850-b1f20b527496","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:18:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a08a0a85-825b-44ea-8850-b1f20b527496","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-83633f"} {"level":"debug","ts":"2026-07-06T18:18:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a08a0a85-825b-44ea-8850-b1f20b527496","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:18:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a08a0a85-825b-44ea-8850-b1f20b527496","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5512f964-104b-4969-a8f4-313878e5a271","keyName":"e2e-rate-a-83633f","selected_subscription":"e2e-rate-iso-a-83633f","selected_subscription_key":"ai-tenant-e2e-shared-a-3b0a18/e2e-rate-iso-a-83633f@ai-tenant-e2e-shared-a-3b0a18/rate-test-model-3b0a18","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3b0a18","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-83633f","namespace":"ai-tenant-e2e-shared-a-3b0a18","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T18:18:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a08a0a85-825b-44ea-8850-b1f20b527496","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:18:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a08a0a85-825b-44ea-8850-b1f20b527496","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:18:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c2ce9d4-612b-470b-8ced-b5191a7b4895","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57450","PortSpecifier":{"PortValue":57450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8c2ce9d4-612b-470b-8ced-b5191a7b4895","method":"POST","path":"/ai-tenant-e2e-shared-a-3b0a18/rate-test-model-3b0a18/v1/completions","host":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:18:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c2ce9d4-612b-470b-8ced-b5191a7b4895","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57450","PortSpecifier":{"PortValue":57450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783361939,"nanos":60189811},"http":{"id":"8c2ce9d4-612b-470b-8ced-b5191a7b4895","method":"POST","headers":{":authority":"e2e-shared-a-3b0a18.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3b0a18/rate-test-model-3b0a18/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:18:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8c2ce9d4-612b-470b-8ced-b5191a7b4895","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1atswwyQDeSsOlfyi_MBpPdp83micVSulR0pK444rPFPxGal1QJ3gAGWq3sqq"} {"level":"debug","ts":"2026-07-06T18:18:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8c2ce9d4-612b-470b-8ced-b5191a7b4895","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3b0a18.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1atswwyQDeSsOlfyi_MBpPdp83micVSulR0pK444rPFPxGal1QJ3gAGWq3sqq\"}"} {"level":"debug","ts":"2026-07-06T18:18:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8c2ce9d4-612b-470b-8ced-b5191a7b4895","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3b0a18.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5512f964-104b-4969-a8f4-313878e5a271","keyName":"e2e-rate-a-83633f","subscription":"e2e-rate-iso-a-83633f","tenant":"e2e-shared-a-3b0a18","userId":"5512f964-104b-4969-a8f4-313878e5a271","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T18:18:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8c2ce9d4-612b-470b-8ced-b5191a7b4895","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3b0a18.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3b0a18/rate-test-model-3b0a18\",\"requestedSubscription\":\"e2e-rate-iso-a-83633f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T18:18:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8c2ce9d4-612b-470b-8ced-b5191a7b4895","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3b0a18.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3b0a18","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-83633f","namespace":"ai-tenant-e2e-shared-a-3b0a18","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T18:18:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8c2ce9d4-612b-470b-8ced-b5191a7b4895","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:18:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c2ce9d4-612b-470b-8ced-b5191a7b4895","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:18:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c2ce9d4-612b-470b-8ced-b5191a7b4895","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:18:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c2ce9d4-612b-470b-8ced-b5191a7b4895","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:18:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c2ce9d4-612b-470b-8ced-b5191a7b4895","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3b0a18/rate-test-model-3b0a18\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:18:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c2ce9d4-612b-470b-8ced-b5191a7b4895","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:18:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c2ce9d4-612b-470b-8ced-b5191a7b4895","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-83633f"} {"level":"debug","ts":"2026-07-06T18:18:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c2ce9d4-612b-470b-8ced-b5191a7b4895","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:18:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c2ce9d4-612b-470b-8ced-b5191a7b4895","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5512f964-104b-4969-a8f4-313878e5a271","keyName":"e2e-rate-a-83633f","selected_subscription":"e2e-rate-iso-a-83633f","selected_subscription_key":"ai-tenant-e2e-shared-a-3b0a18/e2e-rate-iso-a-83633f@ai-tenant-e2e-shared-a-3b0a18/rate-test-model-3b0a18","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3b0a18","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-83633f","namespace":"ai-tenant-e2e-shared-a-3b0a18","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T18:18:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c2ce9d4-612b-470b-8ced-b5191a7b4895","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:18:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c2ce9d4-612b-470b-8ced-b5191a7b4895","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:18:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f5ef1061-445b-4883-b895-c0260435a852","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:44406","PortSpecifier":{"PortValue":44406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f5ef1061-445b-4883-b895-c0260435a852","method":"POST","path":"/ai-tenant-e2e-shared-b-a0e97d/rate-test-model-a0e97d/v1/completions","host":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:18:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f5ef1061-445b-4883-b895-c0260435a852","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:44406","PortSpecifier":{"PortValue":44406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783361939,"nanos":98011975},"http":{"id":"f5ef1061-445b-4883-b895-c0260435a852","method":"POST","headers":{":authority":"e2e-shared-b-a0e97d.apps.2cb011a1-d047-4cde-abc5-c257d7fefca4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-a0e97d/rate-test-model-a0e97d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:18:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f5ef1061-445b-4883-b895-c0260435a852","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2YPicZ0t2erGyBoQ_JgdVPYeSBTTWRzwz9RdyyMblyso90lVRyAIP1eoVfFt"} {"level":"debug","ts":"2026-07-06T18:18:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f5ef1061-445b-4883-b895-c0260435a852","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-a0e97d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2YPicZ0t2erGyBoQ_JgdVPYeSBTTWRzwz9RdyyMblyso90lVRyAIP1eoVfFt\"}"} {"level":"debug","ts":"2026-07-06T18:18:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f5ef1061-445b-4883-b895-c0260435a852","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a0e97d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f380228a-40e7-4d97-9778-1cffe5f2e06e","keyName":"e2e-rate-b-83633f","subscription":"e2e-rate-iso-b-83633f","tenant":"e2e-shared-b-a0e97d","userId":"f380228a-40e7-4d97-9778-1cffe5f2e06e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T18:18:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f5ef1061-445b-4883-b895-c0260435a852","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-a0e97d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-a0e97d/rate-test-model-a0e97d\",\"requestedSubscription\":\"e2e-rate-iso-b-83633f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T18:18:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f5ef1061-445b-4883-b895-c0260435a852","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a0e97d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a0e97d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-83633f","namespace":"ai-tenant-e2e-shared-b-a0e97d","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T18:18:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f5ef1061-445b-4883-b895-c0260435a852","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:18:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5ef1061-445b-4883-b895-c0260435a852","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:18:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5ef1061-445b-4883-b895-c0260435a852","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:18:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5ef1061-445b-4883-b895-c0260435a852","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a0e97d/rate-test-model-a0e97d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:18:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5ef1061-445b-4883-b895-c0260435a852","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:18:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f5ef1061-445b-4883-b895-c0260435a852","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-83633f"} {"level":"debug","ts":"2026-07-06T18:18:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f5ef1061-445b-4883-b895-c0260435a852","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:18:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f5ef1061-445b-4883-b895-c0260435a852","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:18:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f5ef1061-445b-4883-b895-c0260435a852","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f380228a-40e7-4d97-9778-1cffe5f2e06e","keyName":"e2e-rate-b-83633f","selected_subscription":"e2e-rate-iso-b-83633f","selected_subscription_key":"ai-tenant-e2e-shared-b-a0e97d/e2e-rate-iso-b-83633f@ai-tenant-e2e-shared-b-a0e97d/rate-test-model-a0e97d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a0e97d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-83633f","namespace":"ai-tenant-e2e-shared-b-a0e97d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T18:18:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f5ef1061-445b-4883-b895-c0260435a852","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:18:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f5ef1061-445b-4883-b895-c0260435a852","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b8607aaab0d61bc52ae27f160a56454b02029f45e607738092aaa292e68861bb"} {"level":"info","ts":"2026-07-06T18:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b39b24393f77ddb8bcde56861440372632d32396337d1d1e5bfe619f4f04539e"} {"level":"info","ts":"2026-07-06T18:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/32e18a2cab742827a089b1c90a729728a717a4bd58ae3d6a0efd1716a9eff145"} {"level":"info","ts":"2026-07-06T18:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/92500ce09789839f307b2b986a813a1d2591d2a0e4926e158b3c662f23e2a4dd"} {"level":"info","ts":"2026-07-06T18:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c4dff02adbbe53f4e055bc4b4742ac0dad7b268fb4b8aeb907280eba11e2a6d7"} {"level":"info","ts":"2026-07-06T18:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb449ea5057e143b927857d97347ff1f5c24f908741d82800d00dc61b8de8f93"} {"level":"info","ts":"2026-07-06T18:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d73bfa44e0a7c74fe70a105bfe4e84eed5a70d20ddb4c2d66ef679b67119125"} {"level":"info","ts":"2026-07-06T18:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84818204426f30f9ce4f8d370f9529ffd8ec7fbf68908805645fead97fc4fb47"} {"level":"info","ts":"2026-07-06T18:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1af316cc02876263b740542cf3c11086bc0e3cb81b03e9cf0195188c378b3643"} {"level":"info","ts":"2026-07-06T18:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae896bb24ff37eac12f9c824ef505994fb4e29a7cdb02cf6961f5d4ca7193c64"} {"level":"info","ts":"2026-07-06T18:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc6ad780405ec1cf47d166751da738f331743994ef7b623d26fc81ce24d4162a"} {"level":"info","ts":"2026-07-06T18:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f601441289790bbb3055f131547af703595365ced6f9d7f4b3e271c9efbaa37c"} {"level":"info","ts":"2026-07-06T18:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be91919ff6edabc2d610922df2039a4dbbe3a446eb8f8f4dcad2030d76825978"} {"level":"info","ts":"2026-07-06T18:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b11c4a5dd30df4044e92438f751c43d859371986db10d64f874971f1ddb3cb9"} {"level":"info","ts":"2026-07-06T18:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c6f856168531676c3d99acf397095047d8d84007ef3a6d7ade892cb1af8f730f"} {"level":"info","ts":"2026-07-06T18:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d62751565a18ba2ae6fbbd8810a14c2e146bdfd496c6e70ec9efc209b85c56c"} {"level":"info","ts":"2026-07-06T18:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d2408aa51e19011d56c5126302d1be9c492a9eb240aa95b88bd9536e3ff6482"} {"level":"info","ts":"2026-07-06T18:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0de34b989932dbc3e3da29a1f0afeb20448b601a7f83496494cf53b517fe6ecd"} {"level":"info","ts":"2026-07-06T18:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34a2451a71366494959e93c27085580345edbe84074a58b4ed5150b0191c4d2a"} {"level":"info","ts":"2026-07-06T18:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/671856ca9175d3dac06f078fc4ca2c853ae4308a64c3f38aa01605cfcefe78df"}