--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859"} {"level":"info","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"} {"level":"info","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2"} {"level":"info","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859"} {"level":"info","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd"} {"level":"info","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2"} {"level":"info","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859"} {"level":"info","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70"} {"level":"info","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"} {"level":"info","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd"} {"level":"info","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2"} {"level":"info","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859"} {"level":"info","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70"} {"level":"info","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859"} {"level":"info","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"} {"level":"info","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"} {"level":"debug","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"} {"level":"info","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"} {"level":"info","ts":"2026-07-22T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"} {"level":"info","ts":"2026-07-22T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"} {"level":"info","ts":"2026-07-22T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"} {"level":"error","ts":"2026-07-22T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:38:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f7925c6-fd2b-405f-bf75-d5e1ff062ab7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59604","PortSpecifier":{"PortValue":59604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3f7925c6-fd2b-405f-bf75-d5e1ff062ab7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:38:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f7925c6-fd2b-405f-bf75-d5e1ff062ab7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59604","PortSpecifier":{"PortValue":59604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784749085,"nanos":377530159},"http":{"id":"3f7925c6-fd2b-405f-bf75-d5e1ff062ab7","method":"POST","headers":{":authority":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:38:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3f7925c6-fd2b-405f-bf75-d5e1ff062ab7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T19:38:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3f7925c6-fd2b-405f-bf75-d5e1ff062ab7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0a5206f7-d551-4161-9f1b-e9fc569b9a09","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3b2df933-4cfc-4341-876e-5da842949333"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5f0bdf2e9ebd"]}} {"level":"debug","ts":"2026-07-22T19:38:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3f7925c6-fd2b-405f-bf75-d5e1ff062ab7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5f0bdf2e9ebd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3b2df933-4cfc-4341-876e-5da842949333"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0a5206f7-d551-4161-9f1b-e9fc569b9a09","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"183a709f1bd4481de0af60806f19db7b92e497fa7c37fbb724e53baee2fc7cb2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:38:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f7925c6-fd2b-405f-bf75-d5e1ff062ab7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:38:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f7925c6-fd2b-405f-bf75-d5e1ff062ab7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:38:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f7925c6-fd2b-405f-bf75-d5e1ff062ab7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-938311/auth-test-model-938311\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-938311/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:38:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3f7925c6-fd2b-405f-bf75-d5e1ff062ab7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T19:38:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f7925c6-fd2b-405f-bf75-d5e1ff062ab7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:38:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f7925c6-fd2b-405f-bf75-d5e1ff062ab7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T19:38:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f7925c6-fd2b-405f-bf75-d5e1ff062ab7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:38:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f7925c6-fd2b-405f-bf75-d5e1ff062ab7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:38:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f566a54-4f79-4bca-8ab3-bb41f839ad14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39224","PortSpecifier":{"PortValue":39224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2f566a54-4f79-4bca-8ab3-bb41f839ad14","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4addf8.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:38:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f566a54-4f79-4bca-8ab3-bb41f839ad14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39224","PortSpecifier":{"PortValue":39224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784749085,"nanos":413100419},"http":{"id":"2f566a54-4f79-4bca-8ab3-bb41f839ad14","method":"POST","headers":{":authority":"e2e-shared-b-4addf8.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:38:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2f566a54-4f79-4bca-8ab3-bb41f839ad14","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T19:38:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2f566a54-4f79-4bca-8ab3-bb41f839ad14","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0a5206f7-d551-4161-9f1b-e9fc569b9a09","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3b2df933-4cfc-4341-876e-5da842949333"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5f0bdf2e9ebd"]}} {"level":"debug","ts":"2026-07-22T19:38:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2f566a54-4f79-4bca-8ab3-bb41f839ad14","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5f0bdf2e9ebd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3b2df933-4cfc-4341-876e-5da842949333"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0a5206f7-d551-4161-9f1b-e9fc569b9a09","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4addf8.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:38:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f566a54-4f79-4bca-8ab3-bb41f839ad14","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:38:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f566a54-4f79-4bca-8ab3-bb41f839ad14","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:38:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f566a54-4f79-4bca-8ab3-bb41f839ad14","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4addf8/auth-test-model-4addf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4addf8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:38:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2f566a54-4f79-4bca-8ab3-bb41f839ad14","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T19:38:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f566a54-4f79-4bca-8ab3-bb41f839ad14","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:38:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f566a54-4f79-4bca-8ab3-bb41f839ad14","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T19:38:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f566a54-4f79-4bca-8ab3-bb41f839ad14","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:38:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f566a54-4f79-4bca-8ab3-bb41f839ad14","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:38:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8b339f4-3c34-4995-996c-c47390e6547c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59614","PortSpecifier":{"PortValue":59614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a8b339f4-3c34-4995-996c-c47390e6547c","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:38:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8b339f4-3c34-4995-996c-c47390e6547c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59614","PortSpecifier":{"PortValue":59614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784749085,"nanos":448682162},"http":{"id":"a8b339f4-3c34-4995-996c-c47390e6547c","method":"GET","headers":{":authority":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:38:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a8b339f4-3c34-4995-996c-c47390e6547c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1VoPwe9YjlW3lhcDR_6n2yVWYmpR7ki6Xx5TOxqsTYzt0iqRN8UkM8m3Q5NRH"} {"level":"debug","ts":"2026-07-22T19:38:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a8b339f4-3c34-4995-996c-c47390e6547c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-938311.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1VoPwe9YjlW3lhcDR_6n2yVWYmpR7ki6Xx5TOxqsTYzt0iqRN8UkM8m3Q5NRH\"}"} {"level":"debug","ts":"2026-07-22T19:38:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a8b339f4-3c34-4995-996c-c47390e6547c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-938311.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"34f82c91-564b-4515-989c-26b69dc0b260","keyName":"e2e-auth-iso-a-ac9107","subscription":"e2e-auth-iso-a2f531","tenant":"e2e-shared-a-938311","userId":"34f82c91-564b-4515-989c-26b69dc0b260","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T19:38:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a8b339f4-3c34-4995-996c-c47390e6547c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:38:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8b339f4-3c34-4995-996c-c47390e6547c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:38:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8b339f4-3c34-4995-996c-c47390e6547c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:38:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8b339f4-3c34-4995-996c-c47390e6547c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-938311/auth-test-model-938311\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-938311/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:38:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a8b339f4-3c34-4995-996c-c47390e6547c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-22T19:38:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8b339f4-3c34-4995-996c-c47390e6547c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:38:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8b339f4-3c34-4995-996c-c47390e6547c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-a2f531"} {"level":"debug","ts":"2026-07-22T19:38:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8b339f4-3c34-4995-996c-c47390e6547c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T19:38:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8b339f4-3c34-4995-996c-c47390e6547c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:38:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8b339f4-3c34-4995-996c-c47390e6547c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71"} {"level":"info","ts":"2026-07-22T19:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9"} {"level":"info","ts":"2026-07-22T19:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"} {"level":"info","ts":"2026-07-22T19:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2"} {"level":"info","ts":"2026-07-22T19:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"} {"level":"info","ts":"2026-07-22T19:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7"} {"level":"info","ts":"2026-07-22T19:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70"} {"level":"info","ts":"2026-07-22T19:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859"} {"level":"info","ts":"2026-07-22T19:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f"} {"level":"info","ts":"2026-07-22T19:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a"} {"level":"info","ts":"2026-07-22T19:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9"} {"level":"info","ts":"2026-07-22T19:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd"} {"level":"debug","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9"} {"level":"debug","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9"} {"level":"debug","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9"} {"level":"debug","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7"} {"level":"info","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7"} {"level":"debug","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"} {"level":"debug","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7"} {"level":"info","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"} {"level":"debug","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"} {"level":"debug","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"} {"level":"debug","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"} {"level":"info","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9"} {"level":"info","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"} {"level":"info","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9"} {"level":"info","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"} {"level":"info","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9"} {"level":"info","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2"} {"level":"info","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"} {"level":"info","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9"} {"level":"info","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2"} {"level":"info","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"} {"level":"info","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a"} {"level":"info","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2"} {"level":"info","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f"} {"level":"info","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859"} {"level":"info","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a"} {"level":"info","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2"} {"level":"info","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f"} {"level":"info","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70"} {"level":"info","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd"} {"level":"info","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859"} {"level":"debug","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71"} {"level":"debug","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70"} {"level":"info","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd"} {"level":"info","ts":"2026-07-22T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71"} {"level":"info","ts":"2026-07-22T19:38:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"339817b4-35c3-43b7-8ecf-89df94673b66","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40382","PortSpecifier":{"PortValue":40382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"339817b4-35c3-43b7-8ecf-89df94673b66","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:38:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"339817b4-35c3-43b7-8ecf-89df94673b66","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40382","PortSpecifier":{"PortValue":40382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784749104,"nanos":590551963},"http":{"id":"339817b4-35c3-43b7-8ecf-89df94673b66","method":"POST","headers":{":authority":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:38:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"339817b4-35c3-43b7-8ecf-89df94673b66","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T19:38:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"339817b4-35c3-43b7-8ecf-89df94673b66","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0a5206f7-d551-4161-9f1b-e9fc569b9a09","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3b2df933-4cfc-4341-876e-5da842949333"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5f0bdf2e9ebd"]}} {"level":"debug","ts":"2026-07-22T19:38:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"339817b4-35c3-43b7-8ecf-89df94673b66","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5f0bdf2e9ebd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3b2df933-4cfc-4341-876e-5da842949333"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0a5206f7-d551-4161-9f1b-e9fc569b9a09","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"183a709f1bd4481de0af60806f19db7b92e497fa7c37fbb724e53baee2fc7cb2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:38:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"339817b4-35c3-43b7-8ecf-89df94673b66","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:38:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"339817b4-35c3-43b7-8ecf-89df94673b66","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:38:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"339817b4-35c3-43b7-8ecf-89df94673b66","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-938311/auth-test-model-938311\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-938311/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:38:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"339817b4-35c3-43b7-8ecf-89df94673b66","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T19:38:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"339817b4-35c3-43b7-8ecf-89df94673b66","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T19:38:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"339817b4-35c3-43b7-8ecf-89df94673b66","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-22T19:38:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"339817b4-35c3-43b7-8ecf-89df94673b66","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:38:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"339817b4-35c3-43b7-8ecf-89df94673b66","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:38:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b8da084-43f9-4c0c-a5ac-e1dc5fc6d08b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42722","PortSpecifier":{"PortValue":42722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6b8da084-43f9-4c0c-a5ac-e1dc5fc6d08b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4addf8.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:38:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b8da084-43f9-4c0c-a5ac-e1dc5fc6d08b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42722","PortSpecifier":{"PortValue":42722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784749104,"nanos":634350833},"http":{"id":"6b8da084-43f9-4c0c-a5ac-e1dc5fc6d08b","method":"POST","headers":{":authority":"e2e-shared-b-4addf8.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:38:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6b8da084-43f9-4c0c-a5ac-e1dc5fc6d08b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T19:38:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6b8da084-43f9-4c0c-a5ac-e1dc5fc6d08b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0a5206f7-d551-4161-9f1b-e9fc569b9a09","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3b2df933-4cfc-4341-876e-5da842949333"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5f0bdf2e9ebd"]}} {"level":"debug","ts":"2026-07-22T19:38:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6b8da084-43f9-4c0c-a5ac-e1dc5fc6d08b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5f0bdf2e9ebd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3b2df933-4cfc-4341-876e-5da842949333"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0a5206f7-d551-4161-9f1b-e9fc569b9a09","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4addf8.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:38:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b8da084-43f9-4c0c-a5ac-e1dc5fc6d08b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:38:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b8da084-43f9-4c0c-a5ac-e1dc5fc6d08b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:38:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b8da084-43f9-4c0c-a5ac-e1dc5fc6d08b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4addf8/auth-test-model-4addf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4addf8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:38:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6b8da084-43f9-4c0c-a5ac-e1dc5fc6d08b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T19:38:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b8da084-43f9-4c0c-a5ac-e1dc5fc6d08b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:38:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b8da084-43f9-4c0c-a5ac-e1dc5fc6d08b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T19:38:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b8da084-43f9-4c0c-a5ac-e1dc5fc6d08b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:38:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b8da084-43f9-4c0c-a5ac-e1dc5fc6d08b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:38:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07acb810-67a5-44da-9c64-030b82e3e2e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42736","PortSpecifier":{"PortValue":42736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"07acb810-67a5-44da-9c64-030b82e3e2e2","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-4addf8.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:38:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07acb810-67a5-44da-9c64-030b82e3e2e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42736","PortSpecifier":{"PortValue":42736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784749104,"nanos":678756404},"http":{"id":"07acb810-67a5-44da-9c64-030b82e3e2e2","method":"GET","headers":{":authority":"e2e-shared-b-4addf8.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:38:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"07acb810-67a5-44da-9c64-030b82e3e2e2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Nm9Z8mEpcZAQLKbw_MfKwA6CaGZuEkkd192ef4sZ2kmnljou4lWkGnl4Znlf"} {"level":"debug","ts":"2026-07-22T19:38:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"07acb810-67a5-44da-9c64-030b82e3e2e2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-4addf8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Nm9Z8mEpcZAQLKbw_MfKwA6CaGZuEkkd192ef4sZ2kmnljou4lWkGnl4Znlf\"}"} {"level":"debug","ts":"2026-07-22T19:38:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"07acb810-67a5-44da-9c64-030b82e3e2e2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4addf8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-22T19:38:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"07acb810-67a5-44da-9c64-030b82e3e2e2","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4addf8.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:38:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07acb810-67a5-44da-9c64-030b82e3e2e2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:38:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"07acb810-67a5-44da-9c64-030b82e3e2e2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-22T19:38:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07acb810-67a5-44da-9c64-030b82e3e2e2","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-22T19:38:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07acb810-67a5-44da-9c64-030b82e3e2e2","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-22T19:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"} {"level":"info","ts":"2026-07-22T19:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f"} {"level":"info","ts":"2026-07-22T19:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7"} {"level":"info","ts":"2026-07-22T19:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859"} {"level":"info","ts":"2026-07-22T19:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd"} {"level":"info","ts":"2026-07-22T19:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70"} {"level":"info","ts":"2026-07-22T19:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a"} {"level":"info","ts":"2026-07-22T19:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"} {"level":"info","ts":"2026-07-22T19:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9"} {"level":"info","ts":"2026-07-22T19:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71"} {"level":"info","ts":"2026-07-22T19:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2"} {"level":"info","ts":"2026-07-22T19:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9"} {"level":"debug","ts":"2026-07-22T19:38:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd"} {"level":"error","ts":"2026-07-22T19:38:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T19:38:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:38:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd"} {"level":"debug","ts":"2026-07-22T19:38:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859"} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd"} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859"} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9"} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9"} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9"} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9"} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9"} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a"} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2"} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a"} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2"} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a"} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71"} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2"} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f"} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a"} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71"} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2"} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f"} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70"} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70"} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70"} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7"} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7"} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7"} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7"} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7"} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:38:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:38:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7"} {"level":"info","ts":"2026-07-22T19:38:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"} {"level":"info","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aaa2b5ce-c29d-9213-b213-a54aa1017686","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34692","PortSpecifier":{"PortValue":34692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aaa2b5ce-c29d-9213-b213-a54aa1017686","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aaa2b5ce-c29d-9213-b213-a54aa1017686","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34692","PortSpecifier":{"PortValue":34692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784749123,"nanos":862312244},"http":{"id":"aaa2b5ce-c29d-9213-b213-a54aa1017686","method":"POST","headers":{":authority":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"aaa2b5ce-c29d-9213-b213-a54aa1017686","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aaa2b5ce-c29d-9213-b213-a54aa1017686","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0a5206f7-d551-4161-9f1b-e9fc569b9a09","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3b2df933-4cfc-4341-876e-5da842949333"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5f0bdf2e9ebd"]}} {"level":"debug","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aaa2b5ce-c29d-9213-b213-a54aa1017686","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5f0bdf2e9ebd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3b2df933-4cfc-4341-876e-5da842949333"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0a5206f7-d551-4161-9f1b-e9fc569b9a09","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"183a709f1bd4481de0af60806f19db7b92e497fa7c37fbb724e53baee2fc7cb2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aaa2b5ce-c29d-9213-b213-a54aa1017686","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aaa2b5ce-c29d-9213-b213-a54aa1017686","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aaa2b5ce-c29d-9213-b213-a54aa1017686","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-938311/auth-test-model-938311\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-938311/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"aaa2b5ce-c29d-9213-b213-a54aa1017686","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aaa2b5ce-c29d-9213-b213-a54aa1017686","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aaa2b5ce-c29d-9213-b213-a54aa1017686","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aaa2b5ce-c29d-9213-b213-a54aa1017686","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aaa2b5ce-c29d-9213-b213-a54aa1017686","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6e9d05c-5a98-42f4-8f35-5682f1b96584","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35824","PortSpecifier":{"PortValue":35824}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e6e9d05c-5a98-42f4-8f35-5682f1b96584","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4addf8.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6e9d05c-5a98-42f4-8f35-5682f1b96584","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35824","PortSpecifier":{"PortValue":35824}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784749123,"nanos":899709263},"http":{"id":"e6e9d05c-5a98-42f4-8f35-5682f1b96584","method":"POST","headers":{":authority":"e2e-shared-b-4addf8.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e6e9d05c-5a98-42f4-8f35-5682f1b96584","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e6e9d05c-5a98-42f4-8f35-5682f1b96584","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0a5206f7-d551-4161-9f1b-e9fc569b9a09","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3b2df933-4cfc-4341-876e-5da842949333"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5f0bdf2e9ebd"]}} {"level":"debug","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e6e9d05c-5a98-42f4-8f35-5682f1b96584","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5f0bdf2e9ebd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3b2df933-4cfc-4341-876e-5da842949333"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0a5206f7-d551-4161-9f1b-e9fc569b9a09","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4addf8.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6e9d05c-5a98-42f4-8f35-5682f1b96584","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6e9d05c-5a98-42f4-8f35-5682f1b96584","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6e9d05c-5a98-42f4-8f35-5682f1b96584","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4addf8/auth-test-model-4addf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4addf8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e6e9d05c-5a98-42f4-8f35-5682f1b96584","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6e9d05c-5a98-42f4-8f35-5682f1b96584","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6e9d05c-5a98-42f4-8f35-5682f1b96584","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6e9d05c-5a98-42f4-8f35-5682f1b96584","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6e9d05c-5a98-42f4-8f35-5682f1b96584","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7da3641d-1d07-4d72-b82f-a7903c5c2510","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34704","PortSpecifier":{"PortValue":34704}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7da3641d-1d07-4d72-b82f-a7903c5c2510","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7da3641d-1d07-4d72-b82f-a7903c5c2510","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34704","PortSpecifier":{"PortValue":34704}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784749123,"nanos":937210698},"http":{"id":"7da3641d-1d07-4d72-b82f-a7903c5c2510","method":"POST","headers":{":authority":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7da3641d-1d07-4d72-b82f-a7903c5c2510","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7da3641d-1d07-4d72-b82f-a7903c5c2510","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0a5206f7-d551-4161-9f1b-e9fc569b9a09","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3b2df933-4cfc-4341-876e-5da842949333"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5f0bdf2e9ebd"]}} {"level":"debug","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7da3641d-1d07-4d72-b82f-a7903c5c2510","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5f0bdf2e9ebd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3b2df933-4cfc-4341-876e-5da842949333"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0a5206f7-d551-4161-9f1b-e9fc569b9a09","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"183a709f1bd4481de0af60806f19db7b92e497fa7c37fbb724e53baee2fc7cb2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7da3641d-1d07-4d72-b82f-a7903c5c2510","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7da3641d-1d07-4d72-b82f-a7903c5c2510","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7da3641d-1d07-4d72-b82f-a7903c5c2510","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-938311/auth-test-model-938311\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-938311/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7da3641d-1d07-4d72-b82f-a7903c5c2510","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7da3641d-1d07-4d72-b82f-a7903c5c2510","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7da3641d-1d07-4d72-b82f-a7903c5c2510","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7da3641d-1d07-4d72-b82f-a7903c5c2510","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7da3641d-1d07-4d72-b82f-a7903c5c2510","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"529178e0-a3d9-4ae3-8f36-01353111ef5a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35838","PortSpecifier":{"PortValue":35838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"529178e0-a3d9-4ae3-8f36-01353111ef5a","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-4addf8.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"529178e0-a3d9-4ae3-8f36-01353111ef5a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35838","PortSpecifier":{"PortValue":35838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784749123,"nanos":970537814},"http":{"id":"529178e0-a3d9-4ae3-8f36-01353111ef5a","method":"POST","headers":{":authority":"e2e-shared-b-4addf8.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"529178e0-a3d9-4ae3-8f36-01353111ef5a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"529178e0-a3d9-4ae3-8f36-01353111ef5a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0a5206f7-d551-4161-9f1b-e9fc569b9a09","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3b2df933-4cfc-4341-876e-5da842949333"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5f0bdf2e9ebd"]}} {"level":"debug","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"529178e0-a3d9-4ae3-8f36-01353111ef5a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5f0bdf2e9ebd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3b2df933-4cfc-4341-876e-5da842949333"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0a5206f7-d551-4161-9f1b-e9fc569b9a09","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4addf8.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"529178e0-a3d9-4ae3-8f36-01353111ef5a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"529178e0-a3d9-4ae3-8f36-01353111ef5a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"529178e0-a3d9-4ae3-8f36-01353111ef5a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4addf8/auth-test-model-4addf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4addf8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"529178e0-a3d9-4ae3-8f36-01353111ef5a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"529178e0-a3d9-4ae3-8f36-01353111ef5a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"529178e0-a3d9-4ae3-8f36-01353111ef5a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"529178e0-a3d9-4ae3-8f36-01353111ef5a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:38:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"529178e0-a3d9-4ae3-8f36-01353111ef5a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71"} {"level":"info","ts":"2026-07-22T19:38:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9"} {"level":"info","ts":"2026-07-22T19:38:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f"} {"level":"info","ts":"2026-07-22T19:38:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a"} {"level":"info","ts":"2026-07-22T19:38:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"} {"level":"info","ts":"2026-07-22T19:38:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70"} {"level":"info","ts":"2026-07-22T19:38:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9"} {"level":"info","ts":"2026-07-22T19:38:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"} {"level":"info","ts":"2026-07-22T19:38:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd"} {"level":"info","ts":"2026-07-22T19:38:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7"} {"level":"info","ts":"2026-07-22T19:38:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2"} {"level":"info","ts":"2026-07-22T19:38:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859"} {"level":"debug","ts":"2026-07-22T19:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"} {"level":"debug","ts":"2026-07-22T19:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"} {"level":"debug","ts":"2026-07-22T19:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"} {"level":"error","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"} {"level":"error","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2"} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7"} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2"} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7"} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71"} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2"} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71"} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859"} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f"} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859"} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f"} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859"} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f"} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859"} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a"} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd"} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a"} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9"} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70"} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd"} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a"} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9"} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9"} {"level":"info","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd"} {"level":"info","ts":"2026-07-22T19:39:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70"} {"level":"info","ts":"2026-07-22T19:39:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9"} {"level":"info","ts":"2026-07-22T19:39:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9"} {"level":"info","ts":"2026-07-22T19:39:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9"} {"level":"info","ts":"2026-07-22T19:39:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9"} {"level":"error","ts":"2026-07-22T19:39:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T19:39:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df02ed7e-0073-4268-b614-c21643a52972","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55568","PortSpecifier":{"PortValue":55568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"df02ed7e-0073-4268-b614-c21643a52972","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df02ed7e-0073-4268-b614-c21643a52972","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55568","PortSpecifier":{"PortValue":55568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784749143,"nanos":134202848},"http":{"id":"df02ed7e-0073-4268-b614-c21643a52972","method":"POST","headers":{":authority":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"df02ed7e-0073-4268-b614-c21643a52972","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"df02ed7e-0073-4268-b614-c21643a52972","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0a5206f7-d551-4161-9f1b-e9fc569b9a09","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3b2df933-4cfc-4341-876e-5da842949333"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5f0bdf2e9ebd"]}} {"level":"debug","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"df02ed7e-0073-4268-b614-c21643a52972","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5f0bdf2e9ebd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3b2df933-4cfc-4341-876e-5da842949333"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0a5206f7-d551-4161-9f1b-e9fc569b9a09","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"183a709f1bd4481de0af60806f19db7b92e497fa7c37fbb724e53baee2fc7cb2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df02ed7e-0073-4268-b614-c21643a52972","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df02ed7e-0073-4268-b614-c21643a52972","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df02ed7e-0073-4268-b614-c21643a52972","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-938311/auth-test-model-938311\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-938311/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"df02ed7e-0073-4268-b614-c21643a52972","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df02ed7e-0073-4268-b614-c21643a52972","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df02ed7e-0073-4268-b614-c21643a52972","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df02ed7e-0073-4268-b614-c21643a52972","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df02ed7e-0073-4268-b614-c21643a52972","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"adf348b5-a821-45eb-8160-85e321774fe6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59206","PortSpecifier":{"PortValue":59206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"adf348b5-a821-45eb-8160-85e321774fe6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4addf8.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"adf348b5-a821-45eb-8160-85e321774fe6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59206","PortSpecifier":{"PortValue":59206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784749143,"nanos":202853720},"http":{"id":"adf348b5-a821-45eb-8160-85e321774fe6","method":"POST","headers":{":authority":"e2e-shared-b-4addf8.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"adf348b5-a821-45eb-8160-85e321774fe6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"adf348b5-a821-45eb-8160-85e321774fe6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0a5206f7-d551-4161-9f1b-e9fc569b9a09","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3b2df933-4cfc-4341-876e-5da842949333"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5f0bdf2e9ebd"]}} {"level":"debug","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"adf348b5-a821-45eb-8160-85e321774fe6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5f0bdf2e9ebd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3b2df933-4cfc-4341-876e-5da842949333"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0a5206f7-d551-4161-9f1b-e9fc569b9a09","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4addf8.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adf348b5-a821-45eb-8160-85e321774fe6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adf348b5-a821-45eb-8160-85e321774fe6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adf348b5-a821-45eb-8160-85e321774fe6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4addf8/auth-test-model-4addf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4addf8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"adf348b5-a821-45eb-8160-85e321774fe6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"adf348b5-a821-45eb-8160-85e321774fe6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"adf348b5-a821-45eb-8160-85e321774fe6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"adf348b5-a821-45eb-8160-85e321774fe6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"adf348b5-a821-45eb-8160-85e321774fe6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00bd50ea-8d84-4444-bbb0-9133d2d556f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59208","PortSpecifier":{"PortValue":59208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"00bd50ea-8d84-4444-bbb0-9133d2d556f4","method":"GET","path":"/maas-api/v1/api-keys/2c60cb66-7fa6-4b84-943a-4903a229169d","host":"e2e-shared-b-4addf8.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00bd50ea-8d84-4444-bbb0-9133d2d556f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59208","PortSpecifier":{"PortValue":59208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784749143,"nanos":243389076},"http":{"id":"00bd50ea-8d84-4444-bbb0-9133d2d556f4","method":"GET","headers":{":authority":"e2e-shared-b-4addf8.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2c60cb66-7fa6-4b84-943a-4903a229169d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"00bd50ea-8d84-4444-bbb0-9133d2d556f4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"00bd50ea-8d84-4444-bbb0-9133d2d556f4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0a5206f7-d551-4161-9f1b-e9fc569b9a09","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3b2df933-4cfc-4341-876e-5da842949333"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5f0bdf2e9ebd"]}} {"level":"debug","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"00bd50ea-8d84-4444-bbb0-9133d2d556f4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5f0bdf2e9ebd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3b2df933-4cfc-4341-876e-5da842949333"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0a5206f7-d551-4161-9f1b-e9fc569b9a09","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4addf8.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2c60cb66-7fa6-4b84-943a-4903a229169d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00bd50ea-8d84-4444-bbb0-9133d2d556f4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00bd50ea-8d84-4444-bbb0-9133d2d556f4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00bd50ea-8d84-4444-bbb0-9133d2d556f4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4addf8/auth-test-model-4addf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4addf8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"00bd50ea-8d84-4444-bbb0-9133d2d556f4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00bd50ea-8d84-4444-bbb0-9133d2d556f4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00bd50ea-8d84-4444-bbb0-9133d2d556f4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00bd50ea-8d84-4444-bbb0-9133d2d556f4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00bd50ea-8d84-4444-bbb0-9133d2d556f4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46fdbd38-e165-4437-9919-1cd5d97a7e03","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55582","PortSpecifier":{"PortValue":55582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"46fdbd38-e165-4437-9919-1cd5d97a7e03","method":"GET","path":"/maas-api/v1/api-keys/2c60cb66-7fa6-4b84-943a-4903a229169d","host":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46fdbd38-e165-4437-9919-1cd5d97a7e03","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55582","PortSpecifier":{"PortValue":55582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784749143,"nanos":275283451},"http":{"id":"46fdbd38-e165-4437-9919-1cd5d97a7e03","method":"GET","headers":{":authority":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2c60cb66-7fa6-4b84-943a-4903a229169d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"46fdbd38-e165-4437-9919-1cd5d97a7e03","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"46fdbd38-e165-4437-9919-1cd5d97a7e03","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0a5206f7-d551-4161-9f1b-e9fc569b9a09","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3b2df933-4cfc-4341-876e-5da842949333"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5f0bdf2e9ebd"]}} {"level":"debug","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"46fdbd38-e165-4437-9919-1cd5d97a7e03","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5f0bdf2e9ebd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3b2df933-4cfc-4341-876e-5da842949333"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0a5206f7-d551-4161-9f1b-e9fc569b9a09","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"183a709f1bd4481de0af60806f19db7b92e497fa7c37fbb724e53baee2fc7cb2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2c60cb66-7fa6-4b84-943a-4903a229169d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46fdbd38-e165-4437-9919-1cd5d97a7e03","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46fdbd38-e165-4437-9919-1cd5d97a7e03","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46fdbd38-e165-4437-9919-1cd5d97a7e03","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-938311/auth-test-model-938311\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-938311/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"46fdbd38-e165-4437-9919-1cd5d97a7e03","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46fdbd38-e165-4437-9919-1cd5d97a7e03","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46fdbd38-e165-4437-9919-1cd5d97a7e03","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46fdbd38-e165-4437-9919-1cd5d97a7e03","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:39:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46fdbd38-e165-4437-9919-1cd5d97a7e03","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9"} {"level":"info","ts":"2026-07-22T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9"} {"level":"info","ts":"2026-07-22T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"} {"level":"info","ts":"2026-07-22T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd"} {"level":"info","ts":"2026-07-22T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859"} {"level":"info","ts":"2026-07-22T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a"} {"level":"info","ts":"2026-07-22T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"} {"level":"info","ts":"2026-07-22T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2"} {"level":"info","ts":"2026-07-22T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f"} {"level":"info","ts":"2026-07-22T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70"} {"level":"info","ts":"2026-07-22T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71"} {"level":"info","ts":"2026-07-22T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7"} {"level":"debug","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70"} {"level":"info","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70"} {"level":"info","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70"} {"level":"debug","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70"} {"level":"debug","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71"} {"level":"info","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7"} {"level":"info","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71"} {"level":"info","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7"} {"level":"info","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71"} {"level":"info","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7"} {"level":"info","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2"} {"level":"debug","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71"} {"level":"info","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9"} {"level":"debug","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2"} {"level":"info","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9"} {"level":"debug","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a"} {"level":"debug","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859"} {"level":"info","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a"} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a"} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd"} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859"} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a"} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9"} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd"} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859"} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a"} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd"} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859"} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a"} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9"} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd"} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859"} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a"} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9"} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd"} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f"} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9"} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd"} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f"} {"level":"debug","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"} {"level":"debug","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:39:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"} {"level":"info","ts":"2026-07-22T19:39:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f731ecf-8664-9d21-bbbc-eb66fd768aee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42842","PortSpecifier":{"PortValue":42842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5f731ecf-8664-9d21-bbbc-eb66fd768aee","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:39:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f731ecf-8664-9d21-bbbc-eb66fd768aee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42842","PortSpecifier":{"PortValue":42842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784749158,"nanos":261344736},"http":{"id":"5f731ecf-8664-9d21-bbbc-eb66fd768aee","method":"POST","headers":{":authority":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:39:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5f731ecf-8664-9d21-bbbc-eb66fd768aee","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T19:39:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5f731ecf-8664-9d21-bbbc-eb66fd768aee","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0a5206f7-d551-4161-9f1b-e9fc569b9a09","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3b2df933-4cfc-4341-876e-5da842949333"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5f0bdf2e9ebd"]}} {"level":"debug","ts":"2026-07-22T19:39:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5f731ecf-8664-9d21-bbbc-eb66fd768aee","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5f0bdf2e9ebd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3b2df933-4cfc-4341-876e-5da842949333"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0a5206f7-d551-4161-9f1b-e9fc569b9a09","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"183a709f1bd4481de0af60806f19db7b92e497fa7c37fbb724e53baee2fc7cb2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:39:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f731ecf-8664-9d21-bbbc-eb66fd768aee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:39:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f731ecf-8664-9d21-bbbc-eb66fd768aee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:39:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f731ecf-8664-9d21-bbbc-eb66fd768aee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-938311/auth-test-model-938311\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-938311/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:39:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5f731ecf-8664-9d21-bbbc-eb66fd768aee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T19:39:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f731ecf-8664-9d21-bbbc-eb66fd768aee","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:39:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f731ecf-8664-9d21-bbbc-eb66fd768aee","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T19:39:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f731ecf-8664-9d21-bbbc-eb66fd768aee","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:39:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f731ecf-8664-9d21-bbbc-eb66fd768aee","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:39:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9656e042-e38a-4e92-b56d-91461d2a1166","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53010","PortSpecifier":{"PortValue":53010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9656e042-e38a-4e92-b56d-91461d2a1166","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4addf8.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:39:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9656e042-e38a-4e92-b56d-91461d2a1166","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53010","PortSpecifier":{"PortValue":53010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784749158,"nanos":297521800},"http":{"id":"9656e042-e38a-4e92-b56d-91461d2a1166","method":"POST","headers":{":authority":"e2e-shared-b-4addf8.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:39:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9656e042-e38a-4e92-b56d-91461d2a1166","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T19:39:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9656e042-e38a-4e92-b56d-91461d2a1166","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0a5206f7-d551-4161-9f1b-e9fc569b9a09","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3b2df933-4cfc-4341-876e-5da842949333"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5f0bdf2e9ebd"]}} {"level":"debug","ts":"2026-07-22T19:39:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9656e042-e38a-4e92-b56d-91461d2a1166","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5f0bdf2e9ebd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3b2df933-4cfc-4341-876e-5da842949333"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0a5206f7-d551-4161-9f1b-e9fc569b9a09","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4addf8.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:39:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9656e042-e38a-4e92-b56d-91461d2a1166","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:39:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9656e042-e38a-4e92-b56d-91461d2a1166","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:39:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9656e042-e38a-4e92-b56d-91461d2a1166","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4addf8/auth-test-model-4addf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4addf8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:39:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9656e042-e38a-4e92-b56d-91461d2a1166","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T19:39:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9656e042-e38a-4e92-b56d-91461d2a1166","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:39:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9656e042-e38a-4e92-b56d-91461d2a1166","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T19:39:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9656e042-e38a-4e92-b56d-91461d2a1166","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:39:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9656e042-e38a-4e92-b56d-91461d2a1166","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:39:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5794f43b-8326-487b-926c-f30e1f8e8f6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42844","PortSpecifier":{"PortValue":42844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5794f43b-8326-487b-926c-f30e1f8e8f6a","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:39:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5794f43b-8326-487b-926c-f30e1f8e8f6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42844","PortSpecifier":{"PortValue":42844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784749158,"nanos":333788069},"http":{"id":"5794f43b-8326-487b-926c-f30e1f8e8f6a","method":"POST","headers":{":authority":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:39:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5794f43b-8326-487b-926c-f30e1f8e8f6a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WXysDOv1sxaojBML_peGxP59uk6k9YAeoJ5uy1tMb4H3J7d6qy4CSSLjRdh2"} {"level":"debug","ts":"2026-07-22T19:39:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5794f43b-8326-487b-926c-f30e1f8e8f6a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-938311.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WXysDOv1sxaojBML_peGxP59uk6k9YAeoJ5uy1tMb4H3J7d6qy4CSSLjRdh2\"}"} {"level":"debug","ts":"2026-07-22T19:39:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5794f43b-8326-487b-926c-f30e1f8e8f6a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-938311.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b792afae-99da-4c3d-b286-7349daae9d82","keyName":"e2e-auth-iso-a-f0fe88","subscription":"e2e-auth-iso-a15a99","tenant":"e2e-shared-a-938311","userId":"b792afae-99da-4c3d-b286-7349daae9d82","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T19:39:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5794f43b-8326-487b-926c-f30e1f8e8f6a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:39:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5794f43b-8326-487b-926c-f30e1f8e8f6a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:39:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5794f43b-8326-487b-926c-f30e1f8e8f6a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:39:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5794f43b-8326-487b-926c-f30e1f8e8f6a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-938311/auth-test-model-938311\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-938311/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:39:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5794f43b-8326-487b-926c-f30e1f8e8f6a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:39:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5794f43b-8326-487b-926c-f30e1f8e8f6a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-22T19:39:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5794f43b-8326-487b-926c-f30e1f8e8f6a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T19:39:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5794f43b-8326-487b-926c-f30e1f8e8f6a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-a15a99"} {"level":"info","ts":"2026-07-22T19:39:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5794f43b-8326-487b-926c-f30e1f8e8f6a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:39:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5794f43b-8326-487b-926c-f30e1f8e8f6a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b58f81b62204f252fd937598645557aadcd655799aad54ea4e6c4a1afbc26c2"} {"level":"info","ts":"2026-07-22T19:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69dee226217909ffc2674300225cf95112d5e10dce30fe810b97f76879a3bce2"} {"level":"info","ts":"2026-07-22T19:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8e15720b7daa9a9820e8a7b1b4b4b2d34bc827de4496d4c091f062adf4f80a3"} {"level":"info","ts":"2026-07-22T19:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b7ab40be1f024ddab2bce1875d3b3c97e0185e802f0259175aa4d23ac1bac772"} {"level":"info","ts":"2026-07-22T19:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ee9e5980d2b4aa5758885bea8666a15ddb8241cc8fd5770ba836393085b5249"} {"level":"info","ts":"2026-07-22T19:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f"} {"level":"info","ts":"2026-07-22T19:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6898eac09e7a6cded27c16cece5c90a292bf863dee4276da7638c5d9d8a4f820"} {"level":"info","ts":"2026-07-22T19:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f42cc7f1bb7232c91c7d7d0ab82a1312b55efac0334d9da77af2f6406f379d70"} {"level":"info","ts":"2026-07-22T19:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd"} {"level":"info","ts":"2026-07-22T19:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0276a9b8e0d7c52f92aea2c461beaf252683f314380afd4e75843b830b241bb"} {"level":"info","ts":"2026-07-22T19:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4eab7caa9d4e99ea8817ba54ab9bafacae7af8c7054e52bcfae706b96e0571c7"} {"level":"info","ts":"2026-07-22T19:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/462bc3a786fa502e8462c9038a8ab4db5e01bf54935da3f0a317335d9c3204e9"} {"level":"info","ts":"2026-07-22T19:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9"} {"level":"info","ts":"2026-07-22T19:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5091a9c19065e73e6a11418f09696c161b889e1de37677701110d2a285c2a41e"} {"level":"info","ts":"2026-07-22T19:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d7cd56784c0a5e499503ed779526c15e7846448625614a2cc491eb33590bb71"} {"level":"info","ts":"2026-07-22T19:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/183a709f1bd4481de0af60806f19db7b92e497fa7c37fbb724e53baee2fc7cb2"} {"level":"info","ts":"2026-07-22T19:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4be333dd4256ec5cc9065b3ece6185aa1d20db99ea0475a94b6e8088b83a9752"} {"level":"info","ts":"2026-07-22T19:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9825bd0d85d948344b6b8d2a01203a44ef67eabf795b7c110f72abea981e859"} {"level":"info","ts":"2026-07-22T19:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/960b4804a71311c4a4817a9ac17755fd6aeaf01d45b6eae1f25089592486dca2"} {"level":"info","ts":"2026-07-22T19:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"} {"level":"info","ts":"2026-07-22T19:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/10b6239233615a269ee694d0ec86eeb670abf33d5c51565f309110b9a2046f92"} {"level":"info","ts":"2026-07-22T19:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d0bd725754976bbfa469e3fa245933fb0d2d4d66bc0298682d6293055d06d54"} {"level":"info","ts":"2026-07-22T19:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/222b26d06bddd3fda312d095977f542191d142892eff9fa6733a3e4733abec2a"} {"level":"info","ts":"2026-07-22T19:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4cee2b41dcb8f85c13daafe9cfc30c5155b1298042531fb6ebe987501f9b49bc"} {"level":"debug","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92d3393411625cf0646c9ca84f12c118e26844c469c6982a73d94a4947a62b99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:40:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:40:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92d3393411625cf0646c9ca84f12c118e26844c469c6982a73d94a4947a62b99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92d3393411625cf0646c9ca84f12c118e26844c469c6982a73d94a4947a62b99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92d3393411625cf0646c9ca84f12c118e26844c469c6982a73d94a4947a62b99","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92d3393411625cf0646c9ca84f12c118e26844c469c6982a73d94a4947a62b99"} {"level":"debug","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92d3393411625cf0646c9ca84f12c118e26844c469c6982a73d94a4947a62b99","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92d3393411625cf0646c9ca84f12c118e26844c469c6982a73d94a4947a62b99"} {"level":"debug","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92d3393411625cf0646c9ca84f12c118e26844c469c6982a73d94a4947a62b99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:40:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:40:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92d3393411625cf0646c9ca84f12c118e26844c469c6982a73d94a4947a62b99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92d3393411625cf0646c9ca84f12c118e26844c469c6982a73d94a4947a62b99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92d3393411625cf0646c9ca84f12c118e26844c469c6982a73d94a4947a62b99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:40:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:40:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92d3393411625cf0646c9ca84f12c118e26844c469c6982a73d94a4947a62b99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92d3393411625cf0646c9ca84f12c118e26844c469c6982a73d94a4947a62b99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92d3393411625cf0646c9ca84f12c118e26844c469c6982a73d94a4947a62b99","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92d3393411625cf0646c9ca84f12c118e26844c469c6982a73d94a4947a62b99"} {"level":"debug","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92d3393411625cf0646c9ca84f12c118e26844c469c6982a73d94a4947a62b99","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92d3393411625cf0646c9ca84f12c118e26844c469c6982a73d94a4947a62b99"} {"level":"debug","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92d3393411625cf0646c9ca84f12c118e26844c469c6982a73d94a4947a62b99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:40:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:40:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92d3393411625cf0646c9ca84f12c118e26844c469c6982a73d94a4947a62b99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92d3393411625cf0646c9ca84f12c118e26844c469c6982a73d94a4947a62b99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92d3393411625cf0646c9ca84f12c118e26844c469c6982a73d94a4947a62b99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"960b4804a71311c4a4817a9ac17755fd6aeaf01d45b6eae1f25089592486dca2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:40:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:40:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"960b4804a71311c4a4817a9ac17755fd6aeaf01d45b6eae1f25089592486dca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"960b4804a71311c4a4817a9ac17755fd6aeaf01d45b6eae1f25089592486dca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"960b4804a71311c4a4817a9ac17755fd6aeaf01d45b6eae1f25089592486dca2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92d3393411625cf0646c9ca84f12c118e26844c469c6982a73d94a4947a62b99"} {"level":"debug","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"960b4804a71311c4a4817a9ac17755fd6aeaf01d45b6eae1f25089592486dca2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:40:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:40:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/960b4804a71311c4a4817a9ac17755fd6aeaf01d45b6eae1f25089592486dca2"} {"level":"info","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"960b4804a71311c4a4817a9ac17755fd6aeaf01d45b6eae1f25089592486dca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"960b4804a71311c4a4817a9ac17755fd6aeaf01d45b6eae1f25089592486dca2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/960b4804a71311c4a4817a9ac17755fd6aeaf01d45b6eae1f25089592486dca2"} {"level":"debug","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"960b4804a71311c4a4817a9ac17755fd6aeaf01d45b6eae1f25089592486dca2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:40:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:40:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["960b4804a71311c4a4817a9ac17755fd6aeaf01d45b6eae1f25089592486dca2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"960b4804a71311c4a4817a9ac17755fd6aeaf01d45b6eae1f25089592486dca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f608d6d975208815238f6a7b56302855e881de6255ebe8459641f986063b1cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:40:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:40:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f608d6d975208815238f6a7b56302855e881de6255ebe8459641f986063b1cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"960b4804a71311c4a4817a9ac17755fd6aeaf01d45b6eae1f25089592486dca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f608d6d975208815238f6a7b56302855e881de6255ebe8459641f986063b1cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f608d6d975208815238f6a7b56302855e881de6255ebe8459641f986063b1cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f608d6d975208815238f6a7b56302855e881de6255ebe8459641f986063b1cd"} {"level":"debug","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f608d6d975208815238f6a7b56302855e881de6255ebe8459641f986063b1cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:40:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:40:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f608d6d975208815238f6a7b56302855e881de6255ebe8459641f986063b1cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/960b4804a71311c4a4817a9ac17755fd6aeaf01d45b6eae1f25089592486dca2"} {"level":"info","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f608d6d975208815238f6a7b56302855e881de6255ebe8459641f986063b1cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f608d6d975208815238f6a7b56302855e881de6255ebe8459641f986063b1cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:40:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:40:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f608d6d975208815238f6a7b56302855e881de6255ebe8459641f986063b1cd"} {"level":"info","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f608d6d975208815238f6a7b56302855e881de6255ebe8459641f986063b1cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f608d6d975208815238f6a7b56302855e881de6255ebe8459641f986063b1cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f608d6d975208815238f6a7b56302855e881de6255ebe8459641f986063b1cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f608d6d975208815238f6a7b56302855e881de6255ebe8459641f986063b1cd"} {"level":"debug","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f608d6d975208815238f6a7b56302855e881de6255ebe8459641f986063b1cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:40:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:40:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f608d6d975208815238f6a7b56302855e881de6255ebe8459641f986063b1cd"} {"level":"info","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:40:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:40:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:40:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:40:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f"} {"level":"error","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f608d6d975208815238f6a7b56302855e881de6255ebe8459641f986063b1cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:40:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:40:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f608d6d975208815238f6a7b56302855e881de6255ebe8459641f986063b1cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f608d6d975208815238f6a7b56302855e881de6255ebe8459641f986063b1cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f608d6d975208815238f6a7b56302855e881de6255ebe8459641f986063b1cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f"} {"level":"info","ts":"2026-07-22T19:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f608d6d975208815238f6a7b56302855e881de6255ebe8459641f986063b1cd"} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f"} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d"} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d"} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be4f8f9fc2645f4e9fe7a95f03c2cb49f6ce19b28f6727d5c354f97b5ee31af9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d"} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be4f8f9fc2645f4e9fe7a95f03c2cb49f6ce19b28f6727d5c354f97b5ee31af9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be4f8f9fc2645f4e9fe7a95f03c2cb49f6ce19b28f6727d5c354f97b5ee31af9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be4f8f9fc2645f4e9fe7a95f03c2cb49f6ce19b28f6727d5c354f97b5ee31af9"} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be4f8f9fc2645f4e9fe7a95f03c2cb49f6ce19b28f6727d5c354f97b5ee31af9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d"} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be4f8f9fc2645f4e9fe7a95f03c2cb49f6ce19b28f6727d5c354f97b5ee31af9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be4f8f9fc2645f4e9fe7a95f03c2cb49f6ce19b28f6727d5c354f97b5ee31af9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be4f8f9fc2645f4e9fe7a95f03c2cb49f6ce19b28f6727d5c354f97b5ee31af9"} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d"} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be4f8f9fc2645f4e9fe7a95f03c2cb49f6ce19b28f6727d5c354f97b5ee31af9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be4f8f9fc2645f4e9fe7a95f03c2cb49f6ce19b28f6727d5c354f97b5ee31af9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d"} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be4f8f9fc2645f4e9fe7a95f03c2cb49f6ce19b28f6727d5c354f97b5ee31af9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be4f8f9fc2645f4e9fe7a95f03c2cb49f6ce19b28f6727d5c354f97b5ee31af9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be4f8f9fc2645f4e9fe7a95f03c2cb49f6ce19b28f6727d5c354f97b5ee31af9"} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be4f8f9fc2645f4e9fe7a95f03c2cb49f6ce19b28f6727d5c354f97b5ee31af9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be4f8f9fc2645f4e9fe7a95f03c2cb49f6ce19b28f6727d5c354f97b5ee31af9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be4f8f9fc2645f4e9fe7a95f03c2cb49f6ce19b28f6727d5c354f97b5ee31af9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d"} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be4f8f9fc2645f4e9fe7a95f03c2cb49f6ce19b28f6727d5c354f97b5ee31af9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be4f8f9fc2645f4e9fe7a95f03c2cb49f6ce19b28f6727d5c354f97b5ee31af9"} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be4f8f9fc2645f4e9fe7a95f03c2cb49f6ce19b28f6727d5c354f97b5ee31af9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0b3fbe7b9075b2a10dc37b664c118bb9099377afb04d451dbe35711ace09d85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0b3fbe7b9075b2a10dc37b664c118bb9099377afb04d451dbe35711ace09d85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d"} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0b3fbe7b9075b2a10dc37b664c118bb9099377afb04d451dbe35711ace09d85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0b3fbe7b9075b2a10dc37b664c118bb9099377afb04d451dbe35711ace09d85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0b3fbe7b9075b2a10dc37b664c118bb9099377afb04d451dbe35711ace09d85"} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0b3fbe7b9075b2a10dc37b664c118bb9099377afb04d451dbe35711ace09d85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0b3fbe7b9075b2a10dc37b664c118bb9099377afb04d451dbe35711ace09d85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be4f8f9fc2645f4e9fe7a95f03c2cb49f6ce19b28f6727d5c354f97b5ee31af9"} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0b3fbe7b9075b2a10dc37b664c118bb9099377afb04d451dbe35711ace09d85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0b3fbe7b9075b2a10dc37b664c118bb9099377afb04d451dbe35711ace09d85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d"} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0b3fbe7b9075b2a10dc37b664c118bb9099377afb04d451dbe35711ace09d85"} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecf1c0ddd8c1e0fbd89427217cf4b6457f0018eca02905850fd188ad82dfb616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecf1c0ddd8c1e0fbd89427217cf4b6457f0018eca02905850fd188ad82dfb616","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecf1c0ddd8c1e0fbd89427217cf4b6457f0018eca02905850fd188ad82dfb616","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecf1c0ddd8c1e0fbd89427217cf4b6457f0018eca02905850fd188ad82dfb616","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d"} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecf1c0ddd8c1e0fbd89427217cf4b6457f0018eca02905850fd188ad82dfb616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecf1c0ddd8c1e0fbd89427217cf4b6457f0018eca02905850fd188ad82dfb616","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecf1c0ddd8c1e0fbd89427217cf4b6457f0018eca02905850fd188ad82dfb616","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecf1c0ddd8c1e0fbd89427217cf4b6457f0018eca02905850fd188ad82dfb616"} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6898eac09e7a6cded27c16cece5c90a292bf863dee4276da7638c5d9d8a4f820","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6898eac09e7a6cded27c16cece5c90a292bf863dee4276da7638c5d9d8a4f820","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6898eac09e7a6cded27c16cece5c90a292bf863dee4276da7638c5d9d8a4f820"} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6898eac09e7a6cded27c16cece5c90a292bf863dee4276da7638c5d9d8a4f820","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6898eac09e7a6cded27c16cece5c90a292bf863dee4276da7638c5d9d8a4f820"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6898eac09e7a6cded27c16cece5c90a292bf863dee4276da7638c5d9d8a4f820","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecf1c0ddd8c1e0fbd89427217cf4b6457f0018eca02905850fd188ad82dfb616","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6898eac09e7a6cded27c16cece5c90a292bf863dee4276da7638c5d9d8a4f820","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecf1c0ddd8c1e0fbd89427217cf4b6457f0018eca02905850fd188ad82dfb616"} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504"} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6898eac09e7a6cded27c16cece5c90a292bf863dee4276da7638c5d9d8a4f820"} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504"} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504"} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504"} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecf1c0ddd8c1e0fbd89427217cf4b6457f0018eca02905850fd188ad82dfb616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecf1c0ddd8c1e0fbd89427217cf4b6457f0018eca02905850fd188ad82dfb616"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504"} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecf1c0ddd8c1e0fbd89427217cf4b6457f0018eca02905850fd188ad82dfb616","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecf1c0ddd8c1e0fbd89427217cf4b6457f0018eca02905850fd188ad82dfb616","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504"} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecf1c0ddd8c1e0fbd89427217cf4b6457f0018eca02905850fd188ad82dfb616"} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504"} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4c1cdd56f1d36cba7a705950047a265e7b22dca2947350e9e2cded7333bedb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504"} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4c1cdd56f1d36cba7a705950047a265e7b22dca2947350e9e2cded7333bedb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9eb1a3e94931bd10e697243197b54690dbcc818744f2dc7fdbeee957fbf1dfa2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4c1cdd56f1d36cba7a705950047a265e7b22dca2947350e9e2cded7333bedb6"} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9eb1a3e94931bd10e697243197b54690dbcc818744f2dc7fdbeee957fbf1dfa2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4c1cdd56f1d36cba7a705950047a265e7b22dca2947350e9e2cded7333bedb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4c1cdd56f1d36cba7a705950047a265e7b22dca2947350e9e2cded7333bedb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9eb1a3e94931bd10e697243197b54690dbcc818744f2dc7fdbeee957fbf1dfa2"} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4c1cdd56f1d36cba7a705950047a265e7b22dca2947350e9e2cded7333bedb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9eb1a3e94931bd10e697243197b54690dbcc818744f2dc7fdbeee957fbf1dfa2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9eb1a3e94931bd10e697243197b54690dbcc818744f2dc7fdbeee957fbf1dfa2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504"} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9eb1a3e94931bd10e697243197b54690dbcc818744f2dc7fdbeee957fbf1dfa2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4c1cdd56f1d36cba7a705950047a265e7b22dca2947350e9e2cded7333bedb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4c1cdd56f1d36cba7a705950047a265e7b22dca2947350e9e2cded7333bedb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4c1cdd56f1d36cba7a705950047a265e7b22dca2947350e9e2cded7333bedb6"} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9eb1a3e94931bd10e697243197b54690dbcc818744f2dc7fdbeee957fbf1dfa2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:40:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:40:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9eb1a3e94931bd10e697243197b54690dbcc818744f2dc7fdbeee957fbf1dfa2"} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504"} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9eb1a3e94931bd10e697243197b54690dbcc818744f2dc7fdbeee957fbf1dfa2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4c1cdd56f1d36cba7a705950047a265e7b22dca2947350e9e2cded7333bedb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:40:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:40:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4c1cdd56f1d36cba7a705950047a265e7b22dca2947350e9e2cded7333bedb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10b6239233615a269ee694d0ec86eeb670abf33d5c51565f309110b9a2046f92"} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4c1cdd56f1d36cba7a705950047a265e7b22dca2947350e9e2cded7333bedb6"} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4c1cdd56f1d36cba7a705950047a265e7b22dca2947350e9e2cded7333bedb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10b6239233615a269ee694d0ec86eeb670abf33d5c51565f309110b9a2046f92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:40:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:40:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["10b6239233615a269ee694d0ec86eeb670abf33d5c51565f309110b9a2046f92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9eb1a3e94931bd10e697243197b54690dbcc818744f2dc7fdbeee957fbf1dfa2"} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a28942b42e3282353f855d730b3023115bd28914b6fa2e31dab9865a8dca4039"} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10b6239233615a269ee694d0ec86eeb670abf33d5c51565f309110b9a2046f92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9eb1a3e94931bd10e697243197b54690dbcc818744f2dc7fdbeee957fbf1dfa2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:40:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:40:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9eb1a3e94931bd10e697243197b54690dbcc818744f2dc7fdbeee957fbf1dfa2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4c1cdd56f1d36cba7a705950047a265e7b22dca2947350e9e2cded7333bedb6"} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aece69c0b326dc11793b86b09fb583f9bc2e50aa80ca467ff96a50140bff8647"} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/183a709f1bd4481de0af60806f19db7b92e497fa7c37fbb724e53baee2fc7cb2"} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9eb1a3e94931bd10e697243197b54690dbcc818744f2dc7fdbeee957fbf1dfa2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a28942b42e3282353f855d730b3023115bd28914b6fa2e31dab9865a8dca4039","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:40:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:40:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a28942b42e3282353f855d730b3023115bd28914b6fa2e31dab9865a8dca4039"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8409d61bd6166b8b7c9cdc661b6b33ad4425ad86eb0dd227a0d96b65254347a"} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a28942b42e3282353f855d730b3023115bd28914b6fa2e31dab9865a8dca4039","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4c1cdd56f1d36cba7a705950047a265e7b22dca2947350e9e2cded7333bedb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aece69c0b326dc11793b86b09fb583f9bc2e50aa80ca467ff96a50140bff8647","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:40:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:40:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aece69c0b326dc11793b86b09fb583f9bc2e50aa80ca467ff96a50140bff8647"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10b6239233615a269ee694d0ec86eeb670abf33d5c51565f309110b9a2046f92"} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/250a94695e9e698e56f1314c030b4ba0394237a6a7ebf5543136be8860ec8e42"} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9eb1a3e94931bd10e697243197b54690dbcc818744f2dc7fdbeee957fbf1dfa2"} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aece69c0b326dc11793b86b09fb583f9bc2e50aa80ca467ff96a50140bff8647","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"183a709f1bd4481de0af60806f19db7b92e497fa7c37fbb724e53baee2fc7cb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:40:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:40:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["183a709f1bd4481de0af60806f19db7b92e497fa7c37fbb724e53baee2fc7cb2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/261cd7270a928d223d76838b680570b27fceb42bc23cf4b74a5f0f1a022fb7a3"} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd"} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"183a709f1bd4481de0af60806f19db7b92e497fa7c37fbb724e53baee2fc7cb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8409d61bd6166b8b7c9cdc661b6b33ad4425ad86eb0dd227a0d96b65254347a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:40:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:40:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8409d61bd6166b8b7c9cdc661b6b33ad4425ad86eb0dd227a0d96b65254347a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9"} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a28942b42e3282353f855d730b3023115bd28914b6fa2e31dab9865a8dca4039"} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c50e7e3ebf5e40de9642f82118f3c812b61fd97bcdf7a4bf5b7fe68529e7b22c"} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8409d61bd6166b8b7c9cdc661b6b33ad4425ad86eb0dd227a0d96b65254347a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:40:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:40:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aece69c0b326dc11793b86b09fb583f9bc2e50aa80ca467ff96a50140bff8647"} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10b6239233615a269ee694d0ec86eeb670abf33d5c51565f309110b9a2046f92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"250a94695e9e698e56f1314c030b4ba0394237a6a7ebf5543136be8860ec8e42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:40:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:40:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["250a94695e9e698e56f1314c030b4ba0394237a6a7ebf5543136be8860ec8e42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ce6c6d76819fdae27781aff112bf527263b2a45f55e6643be806520abc4ed20"} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"250a94695e9e698e56f1314c030b4ba0394237a6a7ebf5543136be8860ec8e42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9eb1a3e94931bd10e697243197b54690dbcc818744f2dc7fdbeee957fbf1dfa2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261cd7270a928d223d76838b680570b27fceb42bc23cf4b74a5f0f1a022fb7a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:40:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:40:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["261cd7270a928d223d76838b680570b27fceb42bc23cf4b74a5f0f1a022fb7a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/183a709f1bd4481de0af60806f19db7b92e497fa7c37fbb724e53baee2fc7cb2"} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8409d61bd6166b8b7c9cdc661b6b33ad4425ad86eb0dd227a0d96b65254347a"} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"261cd7270a928d223d76838b680570b27fceb42bc23cf4b74a5f0f1a022fb7a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:40:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:40:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/250a94695e9e698e56f1314c030b4ba0394237a6a7ebf5543136be8860ec8e42"} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/261cd7270a928d223d76838b680570b27fceb42bc23cf4b74a5f0f1a022fb7a3"} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:40:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:40:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd"} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a28942b42e3282353f855d730b3023115bd28914b6fa2e31dab9865a8dca4039","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c50e7e3ebf5e40de9642f82118f3c812b61fd97bcdf7a4bf5b7fe68529e7b22c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:40:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:40:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c50e7e3ebf5e40de9642f82118f3c812b61fd97bcdf7a4bf5b7fe68529e7b22c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9"} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c50e7e3ebf5e40de9642f82118f3c812b61fd97bcdf7a4bf5b7fe68529e7b22c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aece69c0b326dc11793b86b09fb583f9bc2e50aa80ca467ff96a50140bff8647","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ce6c6d76819fdae27781aff112bf527263b2a45f55e6643be806520abc4ed20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:40:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:40:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ce6c6d76819fdae27781aff112bf527263b2a45f55e6643be806520abc4ed20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c50e7e3ebf5e40de9642f82118f3c812b61fd97bcdf7a4bf5b7fe68529e7b22c"} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ce6c6d76819fdae27781aff112bf527263b2a45f55e6643be806520abc4ed20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"183a709f1bd4481de0af60806f19db7b92e497fa7c37fbb724e53baee2fc7cb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8409d61bd6166b8b7c9cdc661b6b33ad4425ad86eb0dd227a0d96b65254347a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"250a94695e9e698e56f1314c030b4ba0394237a6a7ebf5543136be8860ec8e42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"261cd7270a928d223d76838b680570b27fceb42bc23cf4b74a5f0f1a022fb7a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c50e7e3ebf5e40de9642f82118f3c812b61fd97bcdf7a4bf5b7fe68529e7b22c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ce6c6d76819fdae27781aff112bf527263b2a45f55e6643be806520abc4ed20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:40:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:40:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ce6c6d76819fdae27781aff112bf527263b2a45f55e6643be806520abc4ed20"} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ce6c6d76819fdae27781aff112bf527263b2a45f55e6643be806520abc4ed20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ce6c6d76819fdae27781aff112bf527263b2a45f55e6643be806520abc4ed20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ce6c6d76819fdae27781aff112bf527263b2a45f55e6643be806520abc4ed20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ce6c6d76819fdae27781aff112bf527263b2a45f55e6643be806520abc4ed20"} {"level":"debug","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ce6c6d76819fdae27781aff112bf527263b2a45f55e6643be806520abc4ed20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:40:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:40:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ce6c6d76819fdae27781aff112bf527263b2a45f55e6643be806520abc4ed20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ce6c6d76819fdae27781aff112bf527263b2a45f55e6643be806520abc4ed20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ce6c6d76819fdae27781aff112bf527263b2a45f55e6643be806520abc4ed20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:40:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:40:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ce6c6d76819fdae27781aff112bf527263b2a45f55e6643be806520abc4ed20"} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ce6c6d76819fdae27781aff112bf527263b2a45f55e6643be806520abc4ed20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ce6c6d76819fdae27781aff112bf527263b2a45f55e6643be806520abc4ed20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:40:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:40:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ce6c6d76819fdae27781aff112bf527263b2a45f55e6643be806520abc4ed20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ce6c6d76819fdae27781aff112bf527263b2a45f55e6643be806520abc4ed20"} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ce6c6d76819fdae27781aff112bf527263b2a45f55e6643be806520abc4ed20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ce6c6d76819fdae27781aff112bf527263b2a45f55e6643be806520abc4ed20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:40:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:40:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ce6c6d76819fdae27781aff112bf527263b2a45f55e6643be806520abc4ed20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ce6c6d76819fdae27781aff112bf527263b2a45f55e6643be806520abc4ed20"} {"level":"error","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7ce6c6d76819fdae27781aff112bf527263b2a45f55e6643be806520abc4ed20","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7ce6c6d76819fdae27781aff112bf527263b2a45f55e6643be806520abc4ed20\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T19:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ce6c6d76819fdae27781aff112bf527263b2a45f55e6643be806520abc4ed20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ce6c6d76819fdae27781aff112bf527263b2a45f55e6643be806520abc4ed20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29b82f0b-90eb-4b0a-85ba-54c2994a7752","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50908","PortSpecifier":{"PortValue":50908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"29b82f0b-90eb-4b0a-85ba-54c2994a7752","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29b82f0b-90eb-4b0a-85ba-54c2994a7752","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50908","PortSpecifier":{"PortValue":50908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784749232,"nanos":502419431},"http":{"id":"29b82f0b-90eb-4b0a-85ba-54c2994a7752","method":"POST","headers":{":authority":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"29b82f0b-90eb-4b0a-85ba-54c2994a7752","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"29b82f0b-90eb-4b0a-85ba-54c2994a7752","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0a5206f7-d551-4161-9f1b-e9fc569b9a09","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3b2df933-4cfc-4341-876e-5da842949333"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5f0bdf2e9ebd"]}} {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"29b82f0b-90eb-4b0a-85ba-54c2994a7752","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5f0bdf2e9ebd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3b2df933-4cfc-4341-876e-5da842949333"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0a5206f7-d551-4161-9f1b-e9fc569b9a09","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"183a709f1bd4481de0af60806f19db7b92e497fa7c37fbb724e53baee2fc7cb2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29b82f0b-90eb-4b0a-85ba-54c2994a7752","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29b82f0b-90eb-4b0a-85ba-54c2994a7752","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29b82f0b-90eb-4b0a-85ba-54c2994a7752","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-938311/sub-test-model-938311\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-938311/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"29b82f0b-90eb-4b0a-85ba-54c2994a7752","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29b82f0b-90eb-4b0a-85ba-54c2994a7752","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29b82f0b-90eb-4b0a-85ba-54c2994a7752","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29b82f0b-90eb-4b0a-85ba-54c2994a7752","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29b82f0b-90eb-4b0a-85ba-54c2994a7752","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"14ad4f6c-e657-4aa8-82d7-8f2690f9890c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53472","PortSpecifier":{"PortValue":53472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"14ad4f6c-e657-4aa8-82d7-8f2690f9890c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4addf8.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"14ad4f6c-e657-4aa8-82d7-8f2690f9890c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53472","PortSpecifier":{"PortValue":53472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784749232,"nanos":548909713},"http":{"id":"14ad4f6c-e657-4aa8-82d7-8f2690f9890c","method":"POST","headers":{":authority":"e2e-shared-b-4addf8.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"14ad4f6c-e657-4aa8-82d7-8f2690f9890c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"14ad4f6c-e657-4aa8-82d7-8f2690f9890c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0a5206f7-d551-4161-9f1b-e9fc569b9a09","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3b2df933-4cfc-4341-876e-5da842949333"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5f0bdf2e9ebd"]}} {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"14ad4f6c-e657-4aa8-82d7-8f2690f9890c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5f0bdf2e9ebd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3b2df933-4cfc-4341-876e-5da842949333"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0a5206f7-d551-4161-9f1b-e9fc569b9a09","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4addf8.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14ad4f6c-e657-4aa8-82d7-8f2690f9890c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14ad4f6c-e657-4aa8-82d7-8f2690f9890c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14ad4f6c-e657-4aa8-82d7-8f2690f9890c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4addf8/sub-test-model-4addf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4addf8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"14ad4f6c-e657-4aa8-82d7-8f2690f9890c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14ad4f6c-e657-4aa8-82d7-8f2690f9890c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14ad4f6c-e657-4aa8-82d7-8f2690f9890c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"14ad4f6c-e657-4aa8-82d7-8f2690f9890c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"14ad4f6c-e657-4aa8-82d7-8f2690f9890c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6359a37c-d850-4786-8524-d27d38d8d64f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50912","PortSpecifier":{"PortValue":50912}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6359a37c-d850-4786-8524-d27d38d8d64f","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6359a37c-d850-4786-8524-d27d38d8d64f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50912","PortSpecifier":{"PortValue":50912}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784749232,"nanos":592520716},"http":{"id":"6359a37c-d850-4786-8524-d27d38d8d64f","method":"GET","headers":{":authority":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6359a37c-d850-4786-8524-d27d38d8d64f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LpFqlw8mTM2ieXGK_xkgv1RhWF8lDy0AfDxPn9ZKua8JIdzEP6OVWgBlplFU"} {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6359a37c-d850-4786-8524-d27d38d8d64f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-938311.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LpFqlw8mTM2ieXGK_xkgv1RhWF8lDy0AfDxPn9ZKua8JIdzEP6OVWgBlplFU\"}"} {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6359a37c-d850-4786-8524-d27d38d8d64f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-938311.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5fb7f664-07de-4629-ab49-fd56afd67f8a","keyName":"e2e-sub-iso-e81aff","subscription":"e2e-a-only-2b1e6c","tenant":"e2e-shared-a-938311","userId":"5fb7f664-07de-4629-ab49-fd56afd67f8a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6359a37c-d850-4786-8524-d27d38d8d64f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6359a37c-d850-4786-8524-d27d38d8d64f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6359a37c-d850-4786-8524-d27d38d8d64f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6359a37c-d850-4786-8524-d27d38d8d64f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-938311/sub-test-model-938311\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-938311/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6359a37c-d850-4786-8524-d27d38d8d64f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6359a37c-d850-4786-8524-d27d38d8d64f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6359a37c-d850-4786-8524-d27d38d8d64f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-2b1e6c"} {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6359a37c-d850-4786-8524-d27d38d8d64f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6359a37c-d850-4786-8524-d27d38d8d64f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6359a37c-d850-4786-8524-d27d38d8d64f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5582a31-7f51-445c-90e1-0ba4e8307ced","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53486","PortSpecifier":{"PortValue":53486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d5582a31-7f51-445c-90e1-0ba4e8307ced","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-4addf8.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5582a31-7f51-445c-90e1-0ba4e8307ced","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53486","PortSpecifier":{"PortValue":53486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784749232,"nanos":633372914},"http":{"id":"d5582a31-7f51-445c-90e1-0ba4e8307ced","method":"GET","headers":{":authority":"e2e-shared-b-4addf8.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d5582a31-7f51-445c-90e1-0ba4e8307ced","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1BDkz4KtZ14ytbhOR_T1Tt2yZpyXyGKG2qlvlp2wN7PcsZ6fpR5boG4mcyjjB"} {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d5582a31-7f51-445c-90e1-0ba4e8307ced","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-4addf8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1BDkz4KtZ14ytbhOR_T1Tt2yZpyXyGKG2qlvlp2wN7PcsZ6fpR5boG4mcyjjB\"}"} {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d5582a31-7f51-445c-90e1-0ba4e8307ced","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4addf8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"364ab644-bf2f-4023-bee4-611d084b4ee1","keyName":"e2e-sub-iso-126865","subscription":"e2e-b-only-2b1e6c","tenant":"e2e-shared-b-4addf8","userId":"364ab644-bf2f-4023-bee4-611d084b4ee1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d5582a31-7f51-445c-90e1-0ba4e8307ced","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5582a31-7f51-445c-90e1-0ba4e8307ced","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5582a31-7f51-445c-90e1-0ba4e8307ced","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5582a31-7f51-445c-90e1-0ba4e8307ced","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4addf8/sub-test-model-4addf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4addf8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d5582a31-7f51-445c-90e1-0ba4e8307ced","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5582a31-7f51-445c-90e1-0ba4e8307ced","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5582a31-7f51-445c-90e1-0ba4e8307ced","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5582a31-7f51-445c-90e1-0ba4e8307ced","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-2b1e6c"} {"level":"info","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5582a31-7f51-445c-90e1-0ba4e8307ced","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:40:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5582a31-7f51-445c-90e1-0ba4e8307ced","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b37dad8b-4821-46c8-bc5e-00b81588e83f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55304","PortSpecifier":{"PortValue":55304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b37dad8b-4821-46c8-bc5e-00b81588e83f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b37dad8b-4821-46c8-bc5e-00b81588e83f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55304","PortSpecifier":{"PortValue":55304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784749242,"nanos":878871082},"http":{"id":"b37dad8b-4821-46c8-bc5e-00b81588e83f","method":"POST","headers":{":authority":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b37dad8b-4821-46c8-bc5e-00b81588e83f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b37dad8b-4821-46c8-bc5e-00b81588e83f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0a5206f7-d551-4161-9f1b-e9fc569b9a09","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3b2df933-4cfc-4341-876e-5da842949333"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5f0bdf2e9ebd"]}} {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b37dad8b-4821-46c8-bc5e-00b81588e83f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5f0bdf2e9ebd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3b2df933-4cfc-4341-876e-5da842949333"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0a5206f7-d551-4161-9f1b-e9fc569b9a09","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"183a709f1bd4481de0af60806f19db7b92e497fa7c37fbb724e53baee2fc7cb2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b37dad8b-4821-46c8-bc5e-00b81588e83f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b37dad8b-4821-46c8-bc5e-00b81588e83f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b37dad8b-4821-46c8-bc5e-00b81588e83f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-938311/sub-test-model-938311\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-938311/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b37dad8b-4821-46c8-bc5e-00b81588e83f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b37dad8b-4821-46c8-bc5e-00b81588e83f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b37dad8b-4821-46c8-bc5e-00b81588e83f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b37dad8b-4821-46c8-bc5e-00b81588e83f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b37dad8b-4821-46c8-bc5e-00b81588e83f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a850de3a-a844-4ad6-b859-0c13c4f69ed6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36626","PortSpecifier":{"PortValue":36626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a850de3a-a844-4ad6-b859-0c13c4f69ed6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4addf8.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a850de3a-a844-4ad6-b859-0c13c4f69ed6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36626","PortSpecifier":{"PortValue":36626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784749242,"nanos":917158388},"http":{"id":"a850de3a-a844-4ad6-b859-0c13c4f69ed6","method":"POST","headers":{":authority":"e2e-shared-b-4addf8.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a850de3a-a844-4ad6-b859-0c13c4f69ed6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a850de3a-a844-4ad6-b859-0c13c4f69ed6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0a5206f7-d551-4161-9f1b-e9fc569b9a09","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3b2df933-4cfc-4341-876e-5da842949333"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5f0bdf2e9ebd"]}} {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a850de3a-a844-4ad6-b859-0c13c4f69ed6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5f0bdf2e9ebd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3b2df933-4cfc-4341-876e-5da842949333"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0a5206f7-d551-4161-9f1b-e9fc569b9a09","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4addf8.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a850de3a-a844-4ad6-b859-0c13c4f69ed6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a850de3a-a844-4ad6-b859-0c13c4f69ed6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a850de3a-a844-4ad6-b859-0c13c4f69ed6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4addf8/sub-test-model-4addf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4addf8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a850de3a-a844-4ad6-b859-0c13c4f69ed6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a850de3a-a844-4ad6-b859-0c13c4f69ed6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a850de3a-a844-4ad6-b859-0c13c4f69ed6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a850de3a-a844-4ad6-b859-0c13c4f69ed6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a850de3a-a844-4ad6-b859-0c13c4f69ed6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b2920a9-8de8-4670-8fc2-fca0484cc05f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55314","PortSpecifier":{"PortValue":55314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9b2920a9-8de8-4670-8fc2-fca0484cc05f","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b2920a9-8de8-4670-8fc2-fca0484cc05f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55314","PortSpecifier":{"PortValue":55314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784749242,"nanos":950917816},"http":{"id":"9b2920a9-8de8-4670-8fc2-fca0484cc05f","method":"POST","headers":{":authority":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9b2920a9-8de8-4670-8fc2-fca0484cc05f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-IapKYWrpUlOSJk93_D1DtaoFUkyaJjndHBhi1MSNjZAW0gOovTDVIzBiIYnG"} {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9b2920a9-8de8-4670-8fc2-fca0484cc05f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-938311.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-IapKYWrpUlOSJk93_D1DtaoFUkyaJjndHBhi1MSNjZAW0gOovTDVIzBiIYnG\"}"} {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9b2920a9-8de8-4670-8fc2-fca0484cc05f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-938311.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"58e6ded1-9cee-4aba-81a4-85d5770e489f","keyName":"e2e-sub-iso-b175d4","subscription":"e2e-shared-sub-ca6866","tenant":"e2e-shared-a-938311","userId":"58e6ded1-9cee-4aba-81a4-85d5770e489f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9b2920a9-8de8-4670-8fc2-fca0484cc05f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b2920a9-8de8-4670-8fc2-fca0484cc05f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b2920a9-8de8-4670-8fc2-fca0484cc05f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b2920a9-8de8-4670-8fc2-fca0484cc05f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-938311/sub-test-model-938311\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-938311/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b2920a9-8de8-4670-8fc2-fca0484cc05f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b2920a9-8de8-4670-8fc2-fca0484cc05f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-ca6866"} {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9b2920a9-8de8-4670-8fc2-fca0484cc05f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b2920a9-8de8-4670-8fc2-fca0484cc05f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b2920a9-8de8-4670-8fc2-fca0484cc05f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b2920a9-8de8-4670-8fc2-fca0484cc05f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f55802d-e6b6-433d-89db-9d5269bfcc1e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36634","PortSpecifier":{"PortValue":36634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8f55802d-e6b6-433d-89db-9d5269bfcc1e","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-4addf8.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f55802d-e6b6-433d-89db-9d5269bfcc1e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36634","PortSpecifier":{"PortValue":36634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784749242,"nanos":985286643},"http":{"id":"8f55802d-e6b6-433d-89db-9d5269bfcc1e","method":"POST","headers":{":authority":"e2e-shared-b-4addf8.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8f55802d-e6b6-433d-89db-9d5269bfcc1e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LJ15yquig4iy4GNr_kpJ6R0T5U3YFIz5Lj6p0YJ0mFFX9CGKsJL3Ycb0e8Nj"} {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8f55802d-e6b6-433d-89db-9d5269bfcc1e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-4addf8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LJ15yquig4iy4GNr_kpJ6R0T5U3YFIz5Lj6p0YJ0mFFX9CGKsJL3Ycb0e8Nj\"}"} {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8f55802d-e6b6-433d-89db-9d5269bfcc1e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4addf8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1319d6d5-485e-4f5a-b4d1-7141df361d86","keyName":"e2e-sub-iso-05c8ca","subscription":"e2e-shared-sub-ca6866","tenant":"e2e-shared-b-4addf8","userId":"1319d6d5-485e-4f5a-b4d1-7141df361d86","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8f55802d-e6b6-433d-89db-9d5269bfcc1e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f55802d-e6b6-433d-89db-9d5269bfcc1e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f55802d-e6b6-433d-89db-9d5269bfcc1e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f55802d-e6b6-433d-89db-9d5269bfcc1e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4addf8/sub-test-model-4addf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4addf8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8f55802d-e6b6-433d-89db-9d5269bfcc1e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f55802d-e6b6-433d-89db-9d5269bfcc1e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f55802d-e6b6-433d-89db-9d5269bfcc1e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-ca6866"} {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f55802d-e6b6-433d-89db-9d5269bfcc1e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f55802d-e6b6-433d-89db-9d5269bfcc1e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:40:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f55802d-e6b6-433d-89db-9d5269bfcc1e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:40:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9eb1a3e94931bd10e697243197b54690dbcc818744f2dc7fdbeee957fbf1dfa2"} {"level":"info","ts":"2026-07-22T19:40:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1355686c497c13b32c2eaf0cd20de544b01c81c0524d50c78dea9b549b70b504"} {"level":"info","ts":"2026-07-22T19:40:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6898eac09e7a6cded27c16cece5c90a292bf863dee4276da7638c5d9d8a4f820"} {"level":"info","ts":"2026-07-22T19:40:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f608d6d975208815238f6a7b56302855e881de6255ebe8459641f986063b1cd"} {"level":"info","ts":"2026-07-22T19:40:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be4f8f9fc2645f4e9fe7a95f03c2cb49f6ce19b28f6727d5c354f97b5ee31af9"} {"level":"info","ts":"2026-07-22T19:40:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c50e7e3ebf5e40de9642f82118f3c812b61fd97bcdf7a4bf5b7fe68529e7b22c"} {"level":"info","ts":"2026-07-22T19:40:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a28942b42e3282353f855d730b3023115bd28914b6fa2e31dab9865a8dca4039"} {"level":"info","ts":"2026-07-22T19:40:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8409d61bd6166b8b7c9cdc661b6b33ad4425ad86eb0dd227a0d96b65254347a"} {"level":"info","ts":"2026-07-22T19:40:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ce6c6d76819fdae27781aff112bf527263b2a45f55e6643be806520abc4ed20"} {"level":"info","ts":"2026-07-22T19:40:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f"} {"level":"info","ts":"2026-07-22T19:40:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aece69c0b326dc11793b86b09fb583f9bc2e50aa80ca467ff96a50140bff8647"} {"level":"info","ts":"2026-07-22T19:40:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/261cd7270a928d223d76838b680570b27fceb42bc23cf4b74a5f0f1a022fb7a3"} {"level":"info","ts":"2026-07-22T19:40:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/250a94695e9e698e56f1314c030b4ba0394237a6a7ebf5543136be8860ec8e42"} {"level":"info","ts":"2026-07-22T19:40:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/92d3393411625cf0646c9ca84f12c118e26844c469c6982a73d94a4947a62b99"} {"level":"info","ts":"2026-07-22T19:40:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"} {"level":"info","ts":"2026-07-22T19:40:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/183a709f1bd4481de0af60806f19db7b92e497fa7c37fbb724e53baee2fc7cb2"} {"level":"info","ts":"2026-07-22T19:40:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/960b4804a71311c4a4817a9ac17755fd6aeaf01d45b6eae1f25089592486dca2"} {"level":"info","ts":"2026-07-22T19:40:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0b3fbe7b9075b2a10dc37b664c118bb9099377afb04d451dbe35711ace09d85"} {"level":"info","ts":"2026-07-22T19:40:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/10b6239233615a269ee694d0ec86eeb670abf33d5c51565f309110b9a2046f92"} {"level":"info","ts":"2026-07-22T19:40:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9"} {"level":"info","ts":"2026-07-22T19:40:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd"} {"level":"info","ts":"2026-07-22T19:40:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d4c1cdd56f1d36cba7a705950047a265e7b22dca2947350e9e2cded7333bedb6"} {"level":"info","ts":"2026-07-22T19:40:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ecf1c0ddd8c1e0fbd89427217cf4b6457f0018eca02905850fd188ad82dfb616"} {"level":"info","ts":"2026-07-22T19:40:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4530ae293ab0bbe1a0f9518df81a0696ad222708069f2c07fd1a60d8c6fa630d"} {"level":"debug","ts":"2026-07-22T19:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b84388d151b5bcd0d42447fa553dc2fbf8a76dbea7516587c978603c82446a60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:41:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:41:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b84388d151b5bcd0d42447fa553dc2fbf8a76dbea7516587c978603c82446a60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b84388d151b5bcd0d42447fa553dc2fbf8a76dbea7516587c978603c82446a60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:41:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:41:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b84388d151b5bcd0d42447fa553dc2fbf8a76dbea7516587c978603c82446a60"} {"level":"info","ts":"2026-07-22T19:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b84388d151b5bcd0d42447fa553dc2fbf8a76dbea7516587c978603c82446a60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b84388d151b5bcd0d42447fa553dc2fbf8a76dbea7516587c978603c82446a60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:41:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:41:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T19:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b84388d151b5bcd0d42447fa553dc2fbf8a76dbea7516587c978603c82446a60","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b84388d151b5bcd0d42447fa553dc2fbf8a76dbea7516587c978603c82446a60\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T19:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b84388d151b5bcd0d42447fa553dc2fbf8a76dbea7516587c978603c82446a60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b84388d151b5bcd0d42447fa553dc2fbf8a76dbea7516587c978603c82446a60","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b84388d151b5bcd0d42447fa553dc2fbf8a76dbea7516587c978603c82446a60"} {"level":"info","ts":"2026-07-22T19:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b84388d151b5bcd0d42447fa553dc2fbf8a76dbea7516587c978603c82446a60"} {"level":"debug","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b84388d151b5bcd0d42447fa553dc2fbf8a76dbea7516587c978603c82446a60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:41:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:41:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b84388d151b5bcd0d42447fa553dc2fbf8a76dbea7516587c978603c82446a60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b84388d151b5bcd0d42447fa553dc2fbf8a76dbea7516587c978603c82446a60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b84388d151b5bcd0d42447fa553dc2fbf8a76dbea7516587c978603c82446a60","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b84388d151b5bcd0d42447fa553dc2fbf8a76dbea7516587c978603c82446a60"} {"level":"debug","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:41:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:41:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:41:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:41:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd"} {"level":"info","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:41:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:41:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd"} {"level":"info","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd"} {"level":"debug","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:41:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:41:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:41:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:41:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd"} {"level":"debug","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd"} {"level":"debug","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"037b9809902c46fc1971ab95220d7d202108bcf4b5cb5fc7543f5dfbd6966ba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:41:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:41:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"037b9809902c46fc1971ab95220d7d202108bcf4b5cb5fc7543f5dfbd6966ba0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:41:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:41:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"037b9809902c46fc1971ab95220d7d202108bcf4b5cb5fc7543f5dfbd6966ba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:41:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:41:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/037b9809902c46fc1971ab95220d7d202108bcf4b5cb5fc7543f5dfbd6966ba0"} {"level":"info","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"037b9809902c46fc1971ab95220d7d202108bcf4b5cb5fc7543f5dfbd6966ba0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"037b9809902c46fc1971ab95220d7d202108bcf4b5cb5fc7543f5dfbd6966ba0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/037b9809902c46fc1971ab95220d7d202108bcf4b5cb5fc7543f5dfbd6966ba0"} {"level":"debug","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"037b9809902c46fc1971ab95220d7d202108bcf4b5cb5fc7543f5dfbd6966ba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:41:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:41:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["037b9809902c46fc1971ab95220d7d202108bcf4b5cb5fc7543f5dfbd6966ba0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"037b9809902c46fc1971ab95220d7d202108bcf4b5cb5fc7543f5dfbd6966ba0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"037b9809902c46fc1971ab95220d7d202108bcf4b5cb5fc7543f5dfbd6966ba0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd"} {"level":"info","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/037b9809902c46fc1971ab95220d7d202108bcf4b5cb5fc7543f5dfbd6966ba0"} {"level":"debug","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80fa55660511da17887adb1aabea724fe5c431da42f38aa86221ea285492bca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:41:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:41:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80fa55660511da17887adb1aabea724fe5c431da42f38aa86221ea285492bca1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80fa55660511da17887adb1aabea724fe5c431da42f38aa86221ea285492bca1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80fa55660511da17887adb1aabea724fe5c431da42f38aa86221ea285492bca1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80fa55660511da17887adb1aabea724fe5c431da42f38aa86221ea285492bca1"} {"level":"debug","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80fa55660511da17887adb1aabea724fe5c431da42f38aa86221ea285492bca1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80fa55660511da17887adb1aabea724fe5c431da42f38aa86221ea285492bca1"} {"level":"debug","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80fa55660511da17887adb1aabea724fe5c431da42f38aa86221ea285492bca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:41:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:41:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80fa55660511da17887adb1aabea724fe5c431da42f38aa86221ea285492bca1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80fa55660511da17887adb1aabea724fe5c431da42f38aa86221ea285492bca1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80fa55660511da17887adb1aabea724fe5c431da42f38aa86221ea285492bca1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaa3b9673e57ce7cff6d1a58498ea2cc000fe90f8079ac358d6e5bd09e4682c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:41:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:41:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaa3b9673e57ce7cff6d1a58498ea2cc000fe90f8079ac358d6e5bd09e4682c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaa3b9673e57ce7cff6d1a58498ea2cc000fe90f8079ac358d6e5bd09e4682c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaa3b9673e57ce7cff6d1a58498ea2cc000fe90f8079ac358d6e5bd09e4682c7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80fa55660511da17887adb1aabea724fe5c431da42f38aa86221ea285492bca1"} {"level":"info","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaa3b9673e57ce7cff6d1a58498ea2cc000fe90f8079ac358d6e5bd09e4682c7"} {"level":"debug","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaa3b9673e57ce7cff6d1a58498ea2cc000fe90f8079ac358d6e5bd09e4682c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:41:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:41:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aaa3b9673e57ce7cff6d1a58498ea2cc000fe90f8079ac358d6e5bd09e4682c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaa3b9673e57ce7cff6d1a58498ea2cc000fe90f8079ac358d6e5bd09e4682c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaa3b9673e57ce7cff6d1a58498ea2cc000fe90f8079ac358d6e5bd09e4682c7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaa3b9673e57ce7cff6d1a58498ea2cc000fe90f8079ac358d6e5bd09e4682c7"} {"level":"debug","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dfcdc157fb17d733fcdf888524c26a920e033fcc55ee109fc6277713564b249","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:41:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:41:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dfcdc157fb17d733fcdf888524c26a920e033fcc55ee109fc6277713564b249","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dfcdc157fb17d733fcdf888524c26a920e033fcc55ee109fc6277713564b249","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dfcdc157fb17d733fcdf888524c26a920e033fcc55ee109fc6277713564b249","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dfcdc157fb17d733fcdf888524c26a920e033fcc55ee109fc6277713564b249"} {"level":"debug","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dfcdc157fb17d733fcdf888524c26a920e033fcc55ee109fc6277713564b249","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dfcdc157fb17d733fcdf888524c26a920e033fcc55ee109fc6277713564b249"} {"level":"debug","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dfcdc157fb17d733fcdf888524c26a920e033fcc55ee109fc6277713564b249","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:41:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:41:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5dfcdc157fb17d733fcdf888524c26a920e033fcc55ee109fc6277713564b249"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dfcdc157fb17d733fcdf888524c26a920e033fcc55ee109fc6277713564b249","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dfcdc157fb17d733fcdf888524c26a920e033fcc55ee109fc6277713564b249","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"974fb0a350cc8f4cabf0c625b02b3c030ed2fc3913aebedcc8dac2ab1e6bc584","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:41:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:41:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"974fb0a350cc8f4cabf0c625b02b3c030ed2fc3913aebedcc8dac2ab1e6bc584","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"974fb0a350cc8f4cabf0c625b02b3c030ed2fc3913aebedcc8dac2ab1e6bc584","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"974fb0a350cc8f4cabf0c625b02b3c030ed2fc3913aebedcc8dac2ab1e6bc584","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dfcdc157fb17d733fcdf888524c26a920e033fcc55ee109fc6277713564b249"} {"level":"debug","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"974fb0a350cc8f4cabf0c625b02b3c030ed2fc3913aebedcc8dac2ab1e6bc584","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:41:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:41:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/974fb0a350cc8f4cabf0c625b02b3c030ed2fc3913aebedcc8dac2ab1e6bc584"} {"level":"info","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"974fb0a350cc8f4cabf0c625b02b3c030ed2fc3913aebedcc8dac2ab1e6bc584","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"974fb0a350cc8f4cabf0c625b02b3c030ed2fc3913aebedcc8dac2ab1e6bc584","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/974fb0a350cc8f4cabf0c625b02b3c030ed2fc3913aebedcc8dac2ab1e6bc584"} {"level":"debug","ts":"2026-07-22T19:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"974fb0a350cc8f4cabf0c625b02b3c030ed2fc3913aebedcc8dac2ab1e6bc584","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:41:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:41:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["974fb0a350cc8f4cabf0c625b02b3c030ed2fc3913aebedcc8dac2ab1e6bc584"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"974fb0a350cc8f4cabf0c625b02b3c030ed2fc3913aebedcc8dac2ab1e6bc584","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8b7beb1f7eed0ad0888d6e0020c1c5b49b2f2abd6d99e40555445105fb510d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8b7beb1f7eed0ad0888d6e0020c1c5b49b2f2abd6d99e40555445105fb510d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"974fb0a350cc8f4cabf0c625b02b3c030ed2fc3913aebedcc8dac2ab1e6bc584","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8b7beb1f7eed0ad0888d6e0020c1c5b49b2f2abd6d99e40555445105fb510d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8b7beb1f7eed0ad0888d6e0020c1c5b49b2f2abd6d99e40555445105fb510d3"} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8b7beb1f7eed0ad0888d6e0020c1c5b49b2f2abd6d99e40555445105fb510d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8b7beb1f7eed0ad0888d6e0020c1c5b49b2f2abd6d99e40555445105fb510d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8b7beb1f7eed0ad0888d6e0020c1c5b49b2f2abd6d99e40555445105fb510d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8b7beb1f7eed0ad0888d6e0020c1c5b49b2f2abd6d99e40555445105fb510d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/974fb0a350cc8f4cabf0c625b02b3c030ed2fc3913aebedcc8dac2ab1e6bc584"} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8b7beb1f7eed0ad0888d6e0020c1c5b49b2f2abd6d99e40555445105fb510d3"} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5f1a301ad648265155381f03263359706c47b8bbdab7283a88fe38af223b448","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5f1a301ad648265155381f03263359706c47b8bbdab7283a88fe38af223b448","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5f1a301ad648265155381f03263359706c47b8bbdab7283a88fe38af223b448","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5f1a301ad648265155381f03263359706c47b8bbdab7283a88fe38af223b448","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5f1a301ad648265155381f03263359706c47b8bbdab7283a88fe38af223b448","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5f1a301ad648265155381f03263359706c47b8bbdab7283a88fe38af223b448"} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5f1a301ad648265155381f03263359706c47b8bbdab7283a88fe38af223b448"} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5f1a301ad648265155381f03263359706c47b8bbdab7283a88fe38af223b448","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5f1a301ad648265155381f03263359706c47b8bbdab7283a88fe38af223b448"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5f1a301ad648265155381f03263359706c47b8bbdab7283a88fe38af223b448","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bb088ee5e2814a24abe6744f022f86e6d63e8fcee422c38479af150b2a4338d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bb088ee5e2814a24abe6744f022f86e6d63e8fcee422c38479af150b2a4338d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5f1a301ad648265155381f03263359706c47b8bbdab7283a88fe38af223b448","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bb088ee5e2814a24abe6744f022f86e6d63e8fcee422c38479af150b2a4338d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bb088ee5e2814a24abe6744f022f86e6d63e8fcee422c38479af150b2a4338d"} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bb088ee5e2814a24abe6744f022f86e6d63e8fcee422c38479af150b2a4338d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6bb088ee5e2814a24abe6744f022f86e6d63e8fcee422c38479af150b2a4338d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bb088ee5e2814a24abe6744f022f86e6d63e8fcee422c38479af150b2a4338d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bb088ee5e2814a24abe6744f022f86e6d63e8fcee422c38479af150b2a4338d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5f1a301ad648265155381f03263359706c47b8bbdab7283a88fe38af223b448"} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bb088ee5e2814a24abe6744f022f86e6d63e8fcee422c38479af150b2a4338d"} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a65dc600f8f8220603f016bbdc3f6e084ad888e2939c2f43998f876e9297d95a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a65dc600f8f8220603f016bbdc3f6e084ad888e2939c2f43998f876e9297d95a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfb70e28adb4cca1417d6015fdc843465514f4557d0638273a17a1ccd8389010","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a65dc600f8f8220603f016bbdc3f6e084ad888e2939c2f43998f876e9297d95a"} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfb70e28adb4cca1417d6015fdc843465514f4557d0638273a17a1ccd8389010","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a65dc600f8f8220603f016bbdc3f6e084ad888e2939c2f43998f876e9297d95a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a65dc600f8f8220603f016bbdc3f6e084ad888e2939c2f43998f876e9297d95a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a65dc600f8f8220603f016bbdc3f6e084ad888e2939c2f43998f876e9297d95a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfb70e28adb4cca1417d6015fdc843465514f4557d0638273a17a1ccd8389010","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfb70e28adb4cca1417d6015fdc843465514f4557d0638273a17a1ccd8389010"} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfb70e28adb4cca1417d6015fdc843465514f4557d0638273a17a1ccd8389010","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a65dc600f8f8220603f016bbdc3f6e084ad888e2939c2f43998f876e9297d95a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a65dc600f8f8220603f016bbdc3f6e084ad888e2939c2f43998f876e9297d95a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfb70e28adb4cca1417d6015fdc843465514f4557d0638273a17a1ccd8389010","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfb70e28adb4cca1417d6015fdc843465514f4557d0638273a17a1ccd8389010"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a65dc600f8f8220603f016bbdc3f6e084ad888e2939c2f43998f876e9297d95a"} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfb70e28adb4cca1417d6015fdc843465514f4557d0638273a17a1ccd8389010","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a65dc600f8f8220603f016bbdc3f6e084ad888e2939c2f43998f876e9297d95a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a65dc600f8f8220603f016bbdc3f6e084ad888e2939c2f43998f876e9297d95a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a65dc600f8f8220603f016bbdc3f6e084ad888e2939c2f43998f876e9297d95a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfb70e28adb4cca1417d6015fdc843465514f4557d0638273a17a1ccd8389010","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfb70e28adb4cca1417d6015fdc843465514f4557d0638273a17a1ccd8389010"} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfb70e28adb4cca1417d6015fdc843465514f4557d0638273a17a1ccd8389010","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a65dc600f8f8220603f016bbdc3f6e084ad888e2939c2f43998f876e9297d95a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a65dc600f8f8220603f016bbdc3f6e084ad888e2939c2f43998f876e9297d95a"} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a65dc600f8f8220603f016bbdc3f6e084ad888e2939c2f43998f876e9297d95a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfb70e28adb4cca1417d6015fdc843465514f4557d0638273a17a1ccd8389010","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a65dc600f8f8220603f016bbdc3f6e084ad888e2939c2f43998f876e9297d95a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a65dc600f8f8220603f016bbdc3f6e084ad888e2939c2f43998f876e9297d95a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a65dc600f8f8220603f016bbdc3f6e084ad888e2939c2f43998f876e9297d95a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfb70e28adb4cca1417d6015fdc843465514f4557d0638273a17a1ccd8389010","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a65dc600f8f8220603f016bbdc3f6e084ad888e2939c2f43998f876e9297d95a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a65dc600f8f8220603f016bbdc3f6e084ad888e2939c2f43998f876e9297d95a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfb70e28adb4cca1417d6015fdc843465514f4557d0638273a17a1ccd8389010"} {"level":"error","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a65dc600f8f8220603f016bbdc3f6e084ad888e2939c2f43998f876e9297d95a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a65dc600f8f8220603f016bbdc3f6e084ad888e2939c2f43998f876e9297d95a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a65dc600f8f8220603f016bbdc3f6e084ad888e2939c2f43998f876e9297d95a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a65dc600f8f8220603f016bbdc3f6e084ad888e2939c2f43998f876e9297d95a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a65dc600f8f8220603f016bbdc3f6e084ad888e2939c2f43998f876e9297d95a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a65dc600f8f8220603f016bbdc3f6e084ad888e2939c2f43998f876e9297d95a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a65dc600f8f8220603f016bbdc3f6e084ad888e2939c2f43998f876e9297d95a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfb70e28adb4cca1417d6015fdc843465514f4557d0638273a17a1ccd8389010","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfb70e28adb4cca1417d6015fdc843465514f4557d0638273a17a1ccd8389010"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a65dc600f8f8220603f016bbdc3f6e084ad888e2939c2f43998f876e9297d95a"} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfb70e28adb4cca1417d6015fdc843465514f4557d0638273a17a1ccd8389010","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a65dc600f8f8220603f016bbdc3f6e084ad888e2939c2f43998f876e9297d95a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfb70e28adb4cca1417d6015fdc843465514f4557d0638273a17a1ccd8389010","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a65dc600f8f8220603f016bbdc3f6e084ad888e2939c2f43998f876e9297d95a"} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc1c00e2a4fe471e5a1f4f0e476c7e056274cb2ca88368fc95155e55de31f06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfb70e28adb4cca1417d6015fdc843465514f4557d0638273a17a1ccd8389010"} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bc1c00e2a4fe471e5a1f4f0e476c7e056274cb2ca88368fc95155e55de31f06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"531ce736cf7f626500a6306018d194272b9f1193156a3217bd6996e387dde808","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"531ce736cf7f626500a6306018d194272b9f1193156a3217bd6996e387dde808","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bc1c00e2a4fe471e5a1f4f0e476c7e056274cb2ca88368fc95155e55de31f06"} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a65dc600f8f8220603f016bbdc3f6e084ad888e2939c2f43998f876e9297d95a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a65dc600f8f8220603f016bbdc3f6e084ad888e2939c2f43998f876e9297d95a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a65dc600f8f8220603f016bbdc3f6e084ad888e2939c2f43998f876e9297d95a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc1c00e2a4fe471e5a1f4f0e476c7e056274cb2ca88368fc95155e55de31f06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bc1c00e2a4fe471e5a1f4f0e476c7e056274cb2ca88368fc95155e55de31f06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/531ce736cf7f626500a6306018d194272b9f1193156a3217bd6996e387dde808"} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bc1c00e2a4fe471e5a1f4f0e476c7e056274cb2ca88368fc95155e55de31f06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"531ce736cf7f626500a6306018d194272b9f1193156a3217bd6996e387dde808","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["531ce736cf7f626500a6306018d194272b9f1193156a3217bd6996e387dde808"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"531ce736cf7f626500a6306018d194272b9f1193156a3217bd6996e387dde808","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a65dc600f8f8220603f016bbdc3f6e084ad888e2939c2f43998f876e9297d95a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc1c00e2a4fe471e5a1f4f0e476c7e056274cb2ca88368fc95155e55de31f06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bc1c00e2a4fe471e5a1f4f0e476c7e056274cb2ca88368fc95155e55de31f06"} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bc1c00e2a4fe471e5a1f4f0e476c7e056274cb2ca88368fc95155e55de31f06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"531ce736cf7f626500a6306018d194272b9f1193156a3217bd6996e387dde808","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc1c00e2a4fe471e5a1f4f0e476c7e056274cb2ca88368fc95155e55de31f06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bc1c00e2a4fe471e5a1f4f0e476c7e056274cb2ca88368fc95155e55de31f06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a65dc600f8f8220603f016bbdc3f6e084ad888e2939c2f43998f876e9297d95a"} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bc1c00e2a4fe471e5a1f4f0e476c7e056274cb2ca88368fc95155e55de31f06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc1c00e2a4fe471e5a1f4f0e476c7e056274cb2ca88368fc95155e55de31f06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bc1c00e2a4fe471e5a1f4f0e476c7e056274cb2ca88368fc95155e55de31f06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5bc1c00e2a4fe471e5a1f4f0e476c7e056274cb2ca88368fc95155e55de31f06","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5bc1c00e2a4fe471e5a1f4f0e476c7e056274cb2ca88368fc95155e55de31f06\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/531ce736cf7f626500a6306018d194272b9f1193156a3217bd6996e387dde808"} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc1c00e2a4fe471e5a1f4f0e476c7e056274cb2ca88368fc95155e55de31f06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bc1c00e2a4fe471e5a1f4f0e476c7e056274cb2ca88368fc95155e55de31f06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"960b4804a71311c4a4817a9ac17755fd6aeaf01d45b6eae1f25089592486dca2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bc1c00e2a4fe471e5a1f4f0e476c7e056274cb2ca88368fc95155e55de31f06"} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"960b4804a71311c4a4817a9ac17755fd6aeaf01d45b6eae1f25089592486dca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5aa008ac3f152c9aca7677fbe2ca0a187e4e8c7696a87cf7358b2c6ae0af177c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5aa008ac3f152c9aca7677fbe2ca0a187e4e8c7696a87cf7358b2c6ae0af177c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc1c00e2a4fe471e5a1f4f0e476c7e056274cb2ca88368fc95155e55de31f06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bc1c00e2a4fe471e5a1f4f0e476c7e056274cb2ca88368fc95155e55de31f06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/960b4804a71311c4a4817a9ac17755fd6aeaf01d45b6eae1f25089592486dca2"} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bc1c00e2a4fe471e5a1f4f0e476c7e056274cb2ca88368fc95155e55de31f06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"960b4804a71311c4a4817a9ac17755fd6aeaf01d45b6eae1f25089592486dca2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["960b4804a71311c4a4817a9ac17755fd6aeaf01d45b6eae1f25089592486dca2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"960b4804a71311c4a4817a9ac17755fd6aeaf01d45b6eae1f25089592486dca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5aa008ac3f152c9aca7677fbe2ca0a187e4e8c7696a87cf7358b2c6ae0af177c"} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5aa008ac3f152c9aca7677fbe2ca0a187e4e8c7696a87cf7358b2c6ae0af177c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5aa008ac3f152c9aca7677fbe2ca0a187e4e8c7696a87cf7358b2c6ae0af177c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5aa008ac3f152c9aca7677fbe2ca0a187e4e8c7696a87cf7358b2c6ae0af177c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc1c00e2a4fe471e5a1f4f0e476c7e056274cb2ca88368fc95155e55de31f06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bc1c00e2a4fe471e5a1f4f0e476c7e056274cb2ca88368fc95155e55de31f06"} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bc1c00e2a4fe471e5a1f4f0e476c7e056274cb2ca88368fc95155e55de31f06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"960b4804a71311c4a4817a9ac17755fd6aeaf01d45b6eae1f25089592486dca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e7842b90ce769e9b916ce41456dc2db21509a182bb820c3bc83e3bb7eb30ec3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e7842b90ce769e9b916ce41456dc2db21509a182bb820c3bc83e3bb7eb30ec3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"183a709f1bd4481de0af60806f19db7b92e497fa7c37fbb724e53baee2fc7cb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"183a709f1bd4481de0af60806f19db7b92e497fa7c37fbb724e53baee2fc7cb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5aa008ac3f152c9aca7677fbe2ca0a187e4e8c7696a87cf7358b2c6ae0af177c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc1c00e2a4fe471e5a1f4f0e476c7e056274cb2ca88368fc95155e55de31f06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bc1c00e2a4fe471e5a1f4f0e476c7e056274cb2ca88368fc95155e55de31f06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/960b4804a71311c4a4817a9ac17755fd6aeaf01d45b6eae1f25089592486dca2"} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bc1c00e2a4fe471e5a1f4f0e476c7e056274cb2ca88368fc95155e55de31f06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e7842b90ce769e9b916ce41456dc2db21509a182bb820c3bc83e3bb7eb30ec3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e7842b90ce769e9b916ce41456dc2db21509a182bb820c3bc83e3bb7eb30ec3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"183a709f1bd4481de0af60806f19db7b92e497fa7c37fbb724e53baee2fc7cb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bc1c00e2a4fe471e5a1f4f0e476c7e056274cb2ca88368fc95155e55de31f06","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e7842b90ce769e9b916ce41456dc2db21509a182bb820c3bc83e3bb7eb30ec3"} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e7842b90ce769e9b916ce41456dc2db21509a182bb820c3bc83e3bb7eb30ec3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e7842b90ce769e9b916ce41456dc2db21509a182bb820c3bc83e3bb7eb30ec3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e7842b90ce769e9b916ce41456dc2db21509a182bb820c3bc83e3bb7eb30ec3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"183a709f1bd4481de0af60806f19db7b92e497fa7c37fbb724e53baee2fc7cb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/183a709f1bd4481de0af60806f19db7b92e497fa7c37fbb724e53baee2fc7cb2"} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"183a709f1bd4481de0af60806f19db7b92e497fa7c37fbb724e53baee2fc7cb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e7842b90ce769e9b916ce41456dc2db21509a182bb820c3bc83e3bb7eb30ec3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80d2a02b60ca12ea48dd804932a1cc6d1d0a7c80fdd058a74f706bd2ace2f454","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5aa008ac3f152c9aca7677fbe2ca0a187e4e8c7696a87cf7358b2c6ae0af177c"} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bc1c00e2a4fe471e5a1f4f0e476c7e056274cb2ca88368fc95155e55de31f06"} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80d2a02b60ca12ea48dd804932a1cc6d1d0a7c80fdd058a74f706bd2ace2f454","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e7842b90ce769e9b916ce41456dc2db21509a182bb820c3bc83e3bb7eb30ec3"} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80d2a02b60ca12ea48dd804932a1cc6d1d0a7c80fdd058a74f706bd2ace2f454"} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f"} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"183a709f1bd4481de0af60806f19db7b92e497fa7c37fbb724e53baee2fc7cb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6898eac09e7a6cded27c16cece5c90a292bf863dee4276da7638c5d9d8a4f820","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/183a709f1bd4481de0af60806f19db7b92e497fa7c37fbb724e53baee2fc7cb2"} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6898eac09e7a6cded27c16cece5c90a292bf863dee4276da7638c5d9d8a4f820"} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6898eac09e7a6cded27c16cece5c90a292bf863dee4276da7638c5d9d8a4f820","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10b6239233615a269ee694d0ec86eeb670abf33d5c51565f309110b9a2046f92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10b6239233615a269ee694d0ec86eeb670abf33d5c51565f309110b9a2046f92"} {"level":"info","ts":"2026-07-22T19:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9"} {"level":"info","ts":"2026-07-22T19:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f"} {"level":"info","ts":"2026-07-22T19:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10b6239233615a269ee694d0ec86eeb670abf33d5c51565f309110b9a2046f92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80d2a02b60ca12ea48dd804932a1cc6d1d0a7c80fdd058a74f706bd2ace2f454","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:41:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:41:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80d2a02b60ca12ea48dd804932a1cc6d1d0a7c80fdd058a74f706bd2ace2f454"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80d2a02b60ca12ea48dd804932a1cc6d1d0a7c80fdd058a74f706bd2ace2f454","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:41:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:41:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6898eac09e7a6cded27c16cece5c90a292bf863dee4276da7638c5d9d8a4f820"} {"level":"info","ts":"2026-07-22T19:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10b6239233615a269ee694d0ec86eeb670abf33d5c51565f309110b9a2046f92"} {"level":"info","ts":"2026-07-22T19:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:41:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:41:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80d2a02b60ca12ea48dd804932a1cc6d1d0a7c80fdd058a74f706bd2ace2f454"} {"level":"info","ts":"2026-07-22T19:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9"} {"level":"info","ts":"2026-07-22T19:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"183a709f1bd4481de0af60806f19db7b92e497fa7c37fbb724e53baee2fc7cb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:41:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:41:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["183a709f1bd4481de0af60806f19db7b92e497fa7c37fbb724e53baee2fc7cb2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f"} {"level":"info","ts":"2026-07-22T19:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"183a709f1bd4481de0af60806f19db7b92e497fa7c37fbb724e53baee2fc7cb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6898eac09e7a6cded27c16cece5c90a292bf863dee4276da7638c5d9d8a4f820","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:41:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:41:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6898eac09e7a6cded27c16cece5c90a292bf863dee4276da7638c5d9d8a4f820"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/183a709f1bd4481de0af60806f19db7b92e497fa7c37fbb724e53baee2fc7cb2"} {"level":"info","ts":"2026-07-22T19:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6898eac09e7a6cded27c16cece5c90a292bf863dee4276da7638c5d9d8a4f820","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10b6239233615a269ee694d0ec86eeb670abf33d5c51565f309110b9a2046f92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:41:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:41:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["10b6239233615a269ee694d0ec86eeb670abf33d5c51565f309110b9a2046f92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6898eac09e7a6cded27c16cece5c90a292bf863dee4276da7638c5d9d8a4f820"} {"level":"info","ts":"2026-07-22T19:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10b6239233615a269ee694d0ec86eeb670abf33d5c51565f309110b9a2046f92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80d2a02b60ca12ea48dd804932a1cc6d1d0a7c80fdd058a74f706bd2ace2f454","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"183a709f1bd4481de0af60806f19db7b92e497fa7c37fbb724e53baee2fc7cb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6898eac09e7a6cded27c16cece5c90a292bf863dee4276da7638c5d9d8a4f820","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10b6239233615a269ee694d0ec86eeb670abf33d5c51565f309110b9a2046f92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:41:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:41:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10b6239233615a269ee694d0ec86eeb670abf33d5c51565f309110b9a2046f92"} {"level":"info","ts":"2026-07-22T19:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10b6239233615a269ee694d0ec86eeb670abf33d5c51565f309110b9a2046f92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10b6239233615a269ee694d0ec86eeb670abf33d5c51565f309110b9a2046f92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:41:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:41:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["10b6239233615a269ee694d0ec86eeb670abf33d5c51565f309110b9a2046f92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10b6239233615a269ee694d0ec86eeb670abf33d5c51565f309110b9a2046f92"} {"level":"info","ts":"2026-07-22T19:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10b6239233615a269ee694d0ec86eeb670abf33d5c51565f309110b9a2046f92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10b6239233615a269ee694d0ec86eeb670abf33d5c51565f309110b9a2046f92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:41:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:41:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["10b6239233615a269ee694d0ec86eeb670abf33d5c51565f309110b9a2046f92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10b6239233615a269ee694d0ec86eeb670abf33d5c51565f309110b9a2046f92"} {"level":"error","ts":"2026-07-22T19:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"10b6239233615a269ee694d0ec86eeb670abf33d5c51565f309110b9a2046f92","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"10b6239233615a269ee694d0ec86eeb670abf33d5c51565f309110b9a2046f92\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T19:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10b6239233615a269ee694d0ec86eeb670abf33d5c51565f309110b9a2046f92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10b6239233615a269ee694d0ec86eeb670abf33d5c51565f309110b9a2046f92","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:41:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b984a084-8ae3-4dfa-80ab-96fe8d3ab118","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51474","PortSpecifier":{"PortValue":51474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b984a084-8ae3-4dfa-80ab-96fe8d3ab118","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:41:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b984a084-8ae3-4dfa-80ab-96fe8d3ab118","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51474","PortSpecifier":{"PortValue":51474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784749307,"nanos":607628303},"http":{"id":"b984a084-8ae3-4dfa-80ab-96fe8d3ab118","method":"POST","headers":{":authority":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:41:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b984a084-8ae3-4dfa-80ab-96fe8d3ab118","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T19:41:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b984a084-8ae3-4dfa-80ab-96fe8d3ab118","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0a5206f7-d551-4161-9f1b-e9fc569b9a09","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3b2df933-4cfc-4341-876e-5da842949333"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5f0bdf2e9ebd"]}} {"level":"debug","ts":"2026-07-22T19:41:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b984a084-8ae3-4dfa-80ab-96fe8d3ab118","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5f0bdf2e9ebd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3b2df933-4cfc-4341-876e-5da842949333"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0a5206f7-d551-4161-9f1b-e9fc569b9a09","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"183a709f1bd4481de0af60806f19db7b92e497fa7c37fbb724e53baee2fc7cb2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:41:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b984a084-8ae3-4dfa-80ab-96fe8d3ab118","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:41:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b984a084-8ae3-4dfa-80ab-96fe8d3ab118","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:41:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b984a084-8ae3-4dfa-80ab-96fe8d3ab118","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-938311/rate-test-model-938311\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-938311/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:41:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b984a084-8ae3-4dfa-80ab-96fe8d3ab118","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T19:41:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b984a084-8ae3-4dfa-80ab-96fe8d3ab118","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:41:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b984a084-8ae3-4dfa-80ab-96fe8d3ab118","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T19:41:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b984a084-8ae3-4dfa-80ab-96fe8d3ab118","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:41:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b984a084-8ae3-4dfa-80ab-96fe8d3ab118","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:41:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ddabc920-2199-47bb-8b76-9b04c8dee79d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57582","PortSpecifier":{"PortValue":57582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ddabc920-2199-47bb-8b76-9b04c8dee79d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4addf8.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:41:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ddabc920-2199-47bb-8b76-9b04c8dee79d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57582","PortSpecifier":{"PortValue":57582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784749307,"nanos":648763826},"http":{"id":"ddabc920-2199-47bb-8b76-9b04c8dee79d","method":"POST","headers":{":authority":"e2e-shared-b-4addf8.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:41:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ddabc920-2199-47bb-8b76-9b04c8dee79d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T19:41:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ddabc920-2199-47bb-8b76-9b04c8dee79d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0a5206f7-d551-4161-9f1b-e9fc569b9a09","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3b2df933-4cfc-4341-876e-5da842949333"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5f0bdf2e9ebd"]}} {"level":"debug","ts":"2026-07-22T19:41:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ddabc920-2199-47bb-8b76-9b04c8dee79d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5f0bdf2e9ebd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3b2df933-4cfc-4341-876e-5da842949333"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0a5206f7-d551-4161-9f1b-e9fc569b9a09","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4addf8.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:41:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ddabc920-2199-47bb-8b76-9b04c8dee79d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:41:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ddabc920-2199-47bb-8b76-9b04c8dee79d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:41:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ddabc920-2199-47bb-8b76-9b04c8dee79d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4addf8/rate-test-model-4addf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4addf8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:41:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ddabc920-2199-47bb-8b76-9b04c8dee79d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T19:41:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ddabc920-2199-47bb-8b76-9b04c8dee79d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:41:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ddabc920-2199-47bb-8b76-9b04c8dee79d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T19:41:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ddabc920-2199-47bb-8b76-9b04c8dee79d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:41:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ddabc920-2199-47bb-8b76-9b04c8dee79d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:41:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df7e2cb5-5f49-4e1a-88f0-cbf35e352132","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51488","PortSpecifier":{"PortValue":51488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"df7e2cb5-5f49-4e1a-88f0-cbf35e352132","method":"POST","path":"/ai-tenant-e2e-shared-a-938311/rate-test-model-938311/v1/completions","host":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:41:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df7e2cb5-5f49-4e1a-88f0-cbf35e352132","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51488","PortSpecifier":{"PortValue":51488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784749307,"nanos":692264638},"http":{"id":"df7e2cb5-5f49-4e1a-88f0-cbf35e352132","method":"POST","headers":{":authority":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-938311/rate-test-model-938311/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:41:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"df7e2cb5-5f49-4e1a-88f0-cbf35e352132","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-nzJ8r2XuZsbhghFL_v2bi8Uk9C9z0DM8mukUpuUnGw3xhHYT42WHsCfmN41i"} {"level":"debug","ts":"2026-07-22T19:41:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"df7e2cb5-5f49-4e1a-88f0-cbf35e352132","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-938311.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-nzJ8r2XuZsbhghFL_v2bi8Uk9C9z0DM8mukUpuUnGw3xhHYT42WHsCfmN41i\"}"} {"level":"debug","ts":"2026-07-22T19:41:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"df7e2cb5-5f49-4e1a-88f0-cbf35e352132","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-938311.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f6699bcb-16ab-4dbc-ac7d-71920021e278","keyName":"e2e-rate-a-c00923","subscription":"e2e-rate-iso-a-c00923","tenant":"e2e-shared-a-938311","userId":"f6699bcb-16ab-4dbc-ac7d-71920021e278","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T19:41:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"df7e2cb5-5f49-4e1a-88f0-cbf35e352132","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-938311.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-938311/rate-test-model-938311\",\"requestedSubscription\":\"e2e-rate-iso-a-c00923\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T19:41:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"df7e2cb5-5f49-4e1a-88f0-cbf35e352132","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-938311.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-938311","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c00923","namespace":"ai-tenant-e2e-shared-a-938311","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-938311/rate-test-model-938311"}} {"level":"debug","ts":"2026-07-22T19:41:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"df7e2cb5-5f49-4e1a-88f0-cbf35e352132","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:41:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df7e2cb5-5f49-4e1a-88f0-cbf35e352132","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:41:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df7e2cb5-5f49-4e1a-88f0-cbf35e352132","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:41:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df7e2cb5-5f49-4e1a-88f0-cbf35e352132","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:41:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df7e2cb5-5f49-4e1a-88f0-cbf35e352132","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-938311/rate-test-model-938311\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-938311/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:41:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df7e2cb5-5f49-4e1a-88f0-cbf35e352132","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:41:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df7e2cb5-5f49-4e1a-88f0-cbf35e352132","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c00923"} {"level":"debug","ts":"2026-07-22T19:41:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df7e2cb5-5f49-4e1a-88f0-cbf35e352132","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T19:41:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df7e2cb5-5f49-4e1a-88f0-cbf35e352132","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f6699bcb-16ab-4dbc-ac7d-71920021e278","keyName":"e2e-rate-a-c00923","selected_subscription":"e2e-rate-iso-a-c00923","selected_subscription_key":"ai-tenant-e2e-shared-a-938311/e2e-rate-iso-a-c00923@ai-tenant-e2e-shared-a-938311/rate-test-model-938311","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-938311","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c00923","namespace":"ai-tenant-e2e-shared-a-938311","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-938311/rate-test-model-938311"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T19:41:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df7e2cb5-5f49-4e1a-88f0-cbf35e352132","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:41:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df7e2cb5-5f49-4e1a-88f0-cbf35e352132","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:41:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71fda78a-ad78-4f71-b1c2-4804172b8ba6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51494","PortSpecifier":{"PortValue":51494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"71fda78a-ad78-4f71-b1c2-4804172b8ba6","method":"POST","path":"/ai-tenant-e2e-shared-a-938311/rate-test-model-938311/v1/completions","host":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:41:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71fda78a-ad78-4f71-b1c2-4804172b8ba6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51494","PortSpecifier":{"PortValue":51494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784749308,"nanos":757088131},"http":{"id":"71fda78a-ad78-4f71-b1c2-4804172b8ba6","method":"POST","headers":{":authority":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-938311/rate-test-model-938311/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:41:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"71fda78a-ad78-4f71-b1c2-4804172b8ba6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-nzJ8r2XuZsbhghFL_v2bi8Uk9C9z0DM8mukUpuUnGw3xhHYT42WHsCfmN41i"} {"level":"debug","ts":"2026-07-22T19:41:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"71fda78a-ad78-4f71-b1c2-4804172b8ba6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-938311.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-nzJ8r2XuZsbhghFL_v2bi8Uk9C9z0DM8mukUpuUnGw3xhHYT42WHsCfmN41i\"}"} {"level":"debug","ts":"2026-07-22T19:41:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"71fda78a-ad78-4f71-b1c2-4804172b8ba6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-938311.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f6699bcb-16ab-4dbc-ac7d-71920021e278","keyName":"e2e-rate-a-c00923","subscription":"e2e-rate-iso-a-c00923","tenant":"e2e-shared-a-938311","userId":"f6699bcb-16ab-4dbc-ac7d-71920021e278","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T19:41:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"71fda78a-ad78-4f71-b1c2-4804172b8ba6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-938311.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-938311/rate-test-model-938311\",\"requestedSubscription\":\"e2e-rate-iso-a-c00923\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T19:41:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"71fda78a-ad78-4f71-b1c2-4804172b8ba6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-938311.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-938311","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c00923","namespace":"ai-tenant-e2e-shared-a-938311","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-938311/rate-test-model-938311"}} {"level":"debug","ts":"2026-07-22T19:41:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"71fda78a-ad78-4f71-b1c2-4804172b8ba6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:41:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71fda78a-ad78-4f71-b1c2-4804172b8ba6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:41:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71fda78a-ad78-4f71-b1c2-4804172b8ba6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:41:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71fda78a-ad78-4f71-b1c2-4804172b8ba6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-938311/rate-test-model-938311\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-938311/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:41:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71fda78a-ad78-4f71-b1c2-4804172b8ba6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:41:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71fda78a-ad78-4f71-b1c2-4804172b8ba6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:41:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71fda78a-ad78-4f71-b1c2-4804172b8ba6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c00923"} {"level":"debug","ts":"2026-07-22T19:41:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71fda78a-ad78-4f71-b1c2-4804172b8ba6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T19:41:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71fda78a-ad78-4f71-b1c2-4804172b8ba6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f6699bcb-16ab-4dbc-ac7d-71920021e278","keyName":"e2e-rate-a-c00923","selected_subscription":"e2e-rate-iso-a-c00923","selected_subscription_key":"ai-tenant-e2e-shared-a-938311/e2e-rate-iso-a-c00923@ai-tenant-e2e-shared-a-938311/rate-test-model-938311","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-938311","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c00923","namespace":"ai-tenant-e2e-shared-a-938311","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-938311/rate-test-model-938311"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T19:41:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71fda78a-ad78-4f71-b1c2-4804172b8ba6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:41:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71fda78a-ad78-4f71-b1c2-4804172b8ba6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:41:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f93a415f-30af-45e4-92b5-a564f37eb5e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51502","PortSpecifier":{"PortValue":51502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f93a415f-30af-45e4-92b5-a564f37eb5e4","method":"POST","path":"/ai-tenant-e2e-shared-a-938311/rate-test-model-938311/v1/completions","host":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:41:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f93a415f-30af-45e4-92b5-a564f37eb5e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51502","PortSpecifier":{"PortValue":51502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784749309,"nanos":802421394},"http":{"id":"f93a415f-30af-45e4-92b5-a564f37eb5e4","method":"POST","headers":{":authority":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-938311/rate-test-model-938311/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:41:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f93a415f-30af-45e4-92b5-a564f37eb5e4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-nzJ8r2XuZsbhghFL_v2bi8Uk9C9z0DM8mukUpuUnGw3xhHYT42WHsCfmN41i"} {"level":"debug","ts":"2026-07-22T19:41:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f93a415f-30af-45e4-92b5-a564f37eb5e4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-938311.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-nzJ8r2XuZsbhghFL_v2bi8Uk9C9z0DM8mukUpuUnGw3xhHYT42WHsCfmN41i\"}"} {"level":"debug","ts":"2026-07-22T19:41:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f93a415f-30af-45e4-92b5-a564f37eb5e4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-938311.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f6699bcb-16ab-4dbc-ac7d-71920021e278","keyName":"e2e-rate-a-c00923","subscription":"e2e-rate-iso-a-c00923","tenant":"e2e-shared-a-938311","userId":"f6699bcb-16ab-4dbc-ac7d-71920021e278","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T19:41:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f93a415f-30af-45e4-92b5-a564f37eb5e4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-938311.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-938311/rate-test-model-938311\",\"requestedSubscription\":\"e2e-rate-iso-a-c00923\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T19:41:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f93a415f-30af-45e4-92b5-a564f37eb5e4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-938311.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-938311","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c00923","namespace":"ai-tenant-e2e-shared-a-938311","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-938311/rate-test-model-938311"}} {"level":"debug","ts":"2026-07-22T19:41:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f93a415f-30af-45e4-92b5-a564f37eb5e4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:41:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f93a415f-30af-45e4-92b5-a564f37eb5e4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:41:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f93a415f-30af-45e4-92b5-a564f37eb5e4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:41:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f93a415f-30af-45e4-92b5-a564f37eb5e4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-938311/rate-test-model-938311\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-938311/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:41:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f93a415f-30af-45e4-92b5-a564f37eb5e4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:41:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f93a415f-30af-45e4-92b5-a564f37eb5e4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:41:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f93a415f-30af-45e4-92b5-a564f37eb5e4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c00923"} {"level":"debug","ts":"2026-07-22T19:41:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f93a415f-30af-45e4-92b5-a564f37eb5e4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T19:41:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f93a415f-30af-45e4-92b5-a564f37eb5e4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f6699bcb-16ab-4dbc-ac7d-71920021e278","keyName":"e2e-rate-a-c00923","selected_subscription":"e2e-rate-iso-a-c00923","selected_subscription_key":"ai-tenant-e2e-shared-a-938311/e2e-rate-iso-a-c00923@ai-tenant-e2e-shared-a-938311/rate-test-model-938311","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-938311","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c00923","namespace":"ai-tenant-e2e-shared-a-938311","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-938311/rate-test-model-938311"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T19:41:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f93a415f-30af-45e4-92b5-a564f37eb5e4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:41:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f93a415f-30af-45e4-92b5-a564f37eb5e4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:42:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b6b2b91-1147-4908-9c19-7bd6950fdcac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42226","PortSpecifier":{"PortValue":42226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3b6b2b91-1147-4908-9c19-7bd6950fdcac","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:42:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b6b2b91-1147-4908-9c19-7bd6950fdcac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42226","PortSpecifier":{"PortValue":42226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784749322,"nanos":873365450},"http":{"id":"3b6b2b91-1147-4908-9c19-7bd6950fdcac","method":"POST","headers":{":authority":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:42:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3b6b2b91-1147-4908-9c19-7bd6950fdcac","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T19:42:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3b6b2b91-1147-4908-9c19-7bd6950fdcac","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0a5206f7-d551-4161-9f1b-e9fc569b9a09","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3b2df933-4cfc-4341-876e-5da842949333"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5f0bdf2e9ebd"]}} {"level":"debug","ts":"2026-07-22T19:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3b6b2b91-1147-4908-9c19-7bd6950fdcac","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5f0bdf2e9ebd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3b2df933-4cfc-4341-876e-5da842949333"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0a5206f7-d551-4161-9f1b-e9fc569b9a09","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"183a709f1bd4481de0af60806f19db7b92e497fa7c37fbb724e53baee2fc7cb2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b6b2b91-1147-4908-9c19-7bd6950fdcac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b6b2b91-1147-4908-9c19-7bd6950fdcac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b6b2b91-1147-4908-9c19-7bd6950fdcac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-938311/rate-test-model-938311\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-938311/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:42:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3b6b2b91-1147-4908-9c19-7bd6950fdcac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T19:42:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b6b2b91-1147-4908-9c19-7bd6950fdcac","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:42:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b6b2b91-1147-4908-9c19-7bd6950fdcac","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T19:42:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b6b2b91-1147-4908-9c19-7bd6950fdcac","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:42:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b6b2b91-1147-4908-9c19-7bd6950fdcac","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:42:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a966d2a2-283a-4a8b-9c1a-48cd7f47b567","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46104","PortSpecifier":{"PortValue":46104}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a966d2a2-283a-4a8b-9c1a-48cd7f47b567","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4addf8.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:42:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a966d2a2-283a-4a8b-9c1a-48cd7f47b567","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46104","PortSpecifier":{"PortValue":46104}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784749322,"nanos":911716949},"http":{"id":"a966d2a2-283a-4a8b-9c1a-48cd7f47b567","method":"POST","headers":{":authority":"e2e-shared-b-4addf8.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:42:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a966d2a2-283a-4a8b-9c1a-48cd7f47b567","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T19:42:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a966d2a2-283a-4a8b-9c1a-48cd7f47b567","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0a5206f7-d551-4161-9f1b-e9fc569b9a09","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3b2df933-4cfc-4341-876e-5da842949333"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5f0bdf2e9ebd"]}} {"level":"debug","ts":"2026-07-22T19:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a966d2a2-283a-4a8b-9c1a-48cd7f47b567","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5f0bdf2e9ebd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3b2df933-4cfc-4341-876e-5da842949333"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0a5206f7-d551-4161-9f1b-e9fc569b9a09","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4addf8.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a966d2a2-283a-4a8b-9c1a-48cd7f47b567","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a966d2a2-283a-4a8b-9c1a-48cd7f47b567","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a966d2a2-283a-4a8b-9c1a-48cd7f47b567","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4addf8/rate-test-model-4addf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4addf8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:42:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a966d2a2-283a-4a8b-9c1a-48cd7f47b567","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T19:42:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a966d2a2-283a-4a8b-9c1a-48cd7f47b567","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T19:42:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a966d2a2-283a-4a8b-9c1a-48cd7f47b567","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-22T19:42:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a966d2a2-283a-4a8b-9c1a-48cd7f47b567","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:42:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a966d2a2-283a-4a8b-9c1a-48cd7f47b567","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:42:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31501787-885f-4322-ae0f-a2137494e0d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42242","PortSpecifier":{"PortValue":42242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"31501787-885f-4322-ae0f-a2137494e0d4","method":"POST","path":"/ai-tenant-e2e-shared-a-938311/rate-test-model-938311/v1/completions","host":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:42:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31501787-885f-4322-ae0f-a2137494e0d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42242","PortSpecifier":{"PortValue":42242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784749322,"nanos":946970793},"http":{"id":"31501787-885f-4322-ae0f-a2137494e0d4","method":"POST","headers":{":authority":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-938311/rate-test-model-938311/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:42:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"31501787-885f-4322-ae0f-a2137494e0d4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GuLd2wRAJ9sVIKkZ_E1QNLwenohLNKbQQxhNcxWIRvgrVTM3FP4HrQD5me6S"} {"level":"debug","ts":"2026-07-22T19:42:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"31501787-885f-4322-ae0f-a2137494e0d4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-938311.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GuLd2wRAJ9sVIKkZ_E1QNLwenohLNKbQQxhNcxWIRvgrVTM3FP4HrQD5me6S\"}"} {"level":"debug","ts":"2026-07-22T19:42:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"31501787-885f-4322-ae0f-a2137494e0d4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-938311.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f5b560df-216f-4225-a0ae-bedc725aaffb","keyName":"e2e-rate-a-3c4dbd","subscription":"e2e-rate-iso-a-3c4dbd","tenant":"e2e-shared-a-938311","userId":"f5b560df-216f-4225-a0ae-bedc725aaffb","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T19:42:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"31501787-885f-4322-ae0f-a2137494e0d4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-938311.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-938311/rate-test-model-938311\",\"requestedSubscription\":\"e2e-rate-iso-a-3c4dbd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T19:42:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"31501787-885f-4322-ae0f-a2137494e0d4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-938311.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-938311","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3c4dbd","namespace":"ai-tenant-e2e-shared-a-938311","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-938311/rate-test-model-938311"}} {"level":"debug","ts":"2026-07-22T19:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"31501787-885f-4322-ae0f-a2137494e0d4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31501787-885f-4322-ae0f-a2137494e0d4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31501787-885f-4322-ae0f-a2137494e0d4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31501787-885f-4322-ae0f-a2137494e0d4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-938311/rate-test-model-938311\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-938311/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31501787-885f-4322-ae0f-a2137494e0d4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:42:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31501787-885f-4322-ae0f-a2137494e0d4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T19:42:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31501787-885f-4322-ae0f-a2137494e0d4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:42:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31501787-885f-4322-ae0f-a2137494e0d4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3c4dbd"} {"level":"debug","ts":"2026-07-22T19:42:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31501787-885f-4322-ae0f-a2137494e0d4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f5b560df-216f-4225-a0ae-bedc725aaffb","keyName":"e2e-rate-a-3c4dbd","selected_subscription":"e2e-rate-iso-a-3c4dbd","selected_subscription_key":"ai-tenant-e2e-shared-a-938311/e2e-rate-iso-a-3c4dbd@ai-tenant-e2e-shared-a-938311/rate-test-model-938311","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-938311","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3c4dbd","namespace":"ai-tenant-e2e-shared-a-938311","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-938311/rate-test-model-938311"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T19:42:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31501787-885f-4322-ae0f-a2137494e0d4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:42:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31501787-885f-4322-ae0f-a2137494e0d4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:42:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"555311c1-5810-46a6-a11f-05966e883d4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34306","PortSpecifier":{"PortValue":34306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"555311c1-5810-46a6-a11f-05966e883d4c","method":"POST","path":"/ai-tenant-e2e-shared-a-938311/rate-test-model-938311/v1/completions","host":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:42:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"555311c1-5810-46a6-a11f-05966e883d4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34306","PortSpecifier":{"PortValue":34306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784749323,"nanos":984590858},"http":{"id":"555311c1-5810-46a6-a11f-05966e883d4c","method":"POST","headers":{":authority":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-938311/rate-test-model-938311/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:42:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"555311c1-5810-46a6-a11f-05966e883d4c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GuLd2wRAJ9sVIKkZ_E1QNLwenohLNKbQQxhNcxWIRvgrVTM3FP4HrQD5me6S"} {"level":"debug","ts":"2026-07-22T19:42:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"555311c1-5810-46a6-a11f-05966e883d4c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-938311.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GuLd2wRAJ9sVIKkZ_E1QNLwenohLNKbQQxhNcxWIRvgrVTM3FP4HrQD5me6S\"}"} {"level":"debug","ts":"2026-07-22T19:42:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"555311c1-5810-46a6-a11f-05966e883d4c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-938311.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f5b560df-216f-4225-a0ae-bedc725aaffb","keyName":"e2e-rate-a-3c4dbd","subscription":"e2e-rate-iso-a-3c4dbd","tenant":"e2e-shared-a-938311","userId":"f5b560df-216f-4225-a0ae-bedc725aaffb","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T19:42:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"555311c1-5810-46a6-a11f-05966e883d4c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-938311.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-938311/rate-test-model-938311\",\"requestedSubscription\":\"e2e-rate-iso-a-3c4dbd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T19:42:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"555311c1-5810-46a6-a11f-05966e883d4c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-938311.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-938311","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3c4dbd","namespace":"ai-tenant-e2e-shared-a-938311","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-938311/rate-test-model-938311"}} {"level":"debug","ts":"2026-07-22T19:42:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"555311c1-5810-46a6-a11f-05966e883d4c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:42:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"555311c1-5810-46a6-a11f-05966e883d4c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:42:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"555311c1-5810-46a6-a11f-05966e883d4c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:42:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"555311c1-5810-46a6-a11f-05966e883d4c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-938311/rate-test-model-938311\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-938311/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:42:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"555311c1-5810-46a6-a11f-05966e883d4c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:42:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"555311c1-5810-46a6-a11f-05966e883d4c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:42:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"555311c1-5810-46a6-a11f-05966e883d4c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3c4dbd"} {"level":"debug","ts":"2026-07-22T19:42:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"555311c1-5810-46a6-a11f-05966e883d4c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T19:42:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"555311c1-5810-46a6-a11f-05966e883d4c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f5b560df-216f-4225-a0ae-bedc725aaffb","keyName":"e2e-rate-a-3c4dbd","selected_subscription":"e2e-rate-iso-a-3c4dbd","selected_subscription_key":"ai-tenant-e2e-shared-a-938311/e2e-rate-iso-a-3c4dbd@ai-tenant-e2e-shared-a-938311/rate-test-model-938311","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-938311","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3c4dbd","namespace":"ai-tenant-e2e-shared-a-938311","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-938311/rate-test-model-938311"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T19:42:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"555311c1-5810-46a6-a11f-05966e883d4c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:42:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"555311c1-5810-46a6-a11f-05966e883d4c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:42:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf9ffa0d-2f5e-402d-be24-cfe2f87b6219","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34316","PortSpecifier":{"PortValue":34316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bf9ffa0d-2f5e-402d-be24-cfe2f87b6219","method":"POST","path":"/ai-tenant-e2e-shared-a-938311/rate-test-model-938311/v1/completions","host":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:42:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf9ffa0d-2f5e-402d-be24-cfe2f87b6219","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34316","PortSpecifier":{"PortValue":34316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784749325,"nanos":19690529},"http":{"id":"bf9ffa0d-2f5e-402d-be24-cfe2f87b6219","method":"POST","headers":{":authority":"e2e-shared-a-938311.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-938311/rate-test-model-938311/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:42:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bf9ffa0d-2f5e-402d-be24-cfe2f87b6219","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GuLd2wRAJ9sVIKkZ_E1QNLwenohLNKbQQxhNcxWIRvgrVTM3FP4HrQD5me6S"} {"level":"debug","ts":"2026-07-22T19:42:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bf9ffa0d-2f5e-402d-be24-cfe2f87b6219","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-938311.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GuLd2wRAJ9sVIKkZ_E1QNLwenohLNKbQQxhNcxWIRvgrVTM3FP4HrQD5me6S\"}"} {"level":"debug","ts":"2026-07-22T19:42:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bf9ffa0d-2f5e-402d-be24-cfe2f87b6219","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-938311.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f5b560df-216f-4225-a0ae-bedc725aaffb","keyName":"e2e-rate-a-3c4dbd","subscription":"e2e-rate-iso-a-3c4dbd","tenant":"e2e-shared-a-938311","userId":"f5b560df-216f-4225-a0ae-bedc725aaffb","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T19:42:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bf9ffa0d-2f5e-402d-be24-cfe2f87b6219","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-938311.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-938311/rate-test-model-938311\",\"requestedSubscription\":\"e2e-rate-iso-a-3c4dbd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T19:42:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bf9ffa0d-2f5e-402d-be24-cfe2f87b6219","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-938311.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-938311","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3c4dbd","namespace":"ai-tenant-e2e-shared-a-938311","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-938311/rate-test-model-938311"}} {"level":"debug","ts":"2026-07-22T19:42:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bf9ffa0d-2f5e-402d-be24-cfe2f87b6219","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:42:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf9ffa0d-2f5e-402d-be24-cfe2f87b6219","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:42:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf9ffa0d-2f5e-402d-be24-cfe2f87b6219","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:42:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf9ffa0d-2f5e-402d-be24-cfe2f87b6219","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:42:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf9ffa0d-2f5e-402d-be24-cfe2f87b6219","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-938311/rate-test-model-938311\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-938311/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:42:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf9ffa0d-2f5e-402d-be24-cfe2f87b6219","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:42:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf9ffa0d-2f5e-402d-be24-cfe2f87b6219","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3c4dbd"} {"level":"debug","ts":"2026-07-22T19:42:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf9ffa0d-2f5e-402d-be24-cfe2f87b6219","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T19:42:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf9ffa0d-2f5e-402d-be24-cfe2f87b6219","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f5b560df-216f-4225-a0ae-bedc725aaffb","keyName":"e2e-rate-a-3c4dbd","selected_subscription":"e2e-rate-iso-a-3c4dbd","selected_subscription_key":"ai-tenant-e2e-shared-a-938311/e2e-rate-iso-a-3c4dbd@ai-tenant-e2e-shared-a-938311/rate-test-model-938311","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-938311","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3c4dbd","namespace":"ai-tenant-e2e-shared-a-938311","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-938311/rate-test-model-938311"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T19:42:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf9ffa0d-2f5e-402d-be24-cfe2f87b6219","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:42:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf9ffa0d-2f5e-402d-be24-cfe2f87b6219","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:42:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96c8398b-9a6c-4a04-aca6-3265136bc2b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55770","PortSpecifier":{"PortValue":55770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"96c8398b-9a6c-4a04-aca6-3265136bc2b2","method":"POST","path":"/ai-tenant-e2e-shared-b-4addf8/rate-test-model-4addf8/v1/completions","host":"e2e-shared-b-4addf8.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:42:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96c8398b-9a6c-4a04-aca6-3265136bc2b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55770","PortSpecifier":{"PortValue":55770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784749325,"nanos":55559572},"http":{"id":"96c8398b-9a6c-4a04-aca6-3265136bc2b2","method":"POST","headers":{":authority":"e2e-shared-b-4addf8.apps.9f56804b-15af-4e44-91cf-5f0bdf2e9ebd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-4addf8/rate-test-model-4addf8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:42:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"96c8398b-9a6c-4a04-aca6-3265136bc2b2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-13BlMJjlnGID2bJaR_jUHjOAGJNTWWszu53FJieSkTC1ENzzqG7rWdc8b5ozW"} {"level":"debug","ts":"2026-07-22T19:42:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"96c8398b-9a6c-4a04-aca6-3265136bc2b2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-4addf8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-13BlMJjlnGID2bJaR_jUHjOAGJNTWWszu53FJieSkTC1ENzzqG7rWdc8b5ozW\"}"} {"level":"debug","ts":"2026-07-22T19:42:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"96c8398b-9a6c-4a04-aca6-3265136bc2b2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4addf8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6073c2bd-acc4-4e24-b779-df9f1fba93a3","keyName":"e2e-rate-b-3c4dbd","subscription":"e2e-rate-iso-b-3c4dbd","tenant":"e2e-shared-b-4addf8","userId":"6073c2bd-acc4-4e24-b779-df9f1fba93a3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T19:42:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"96c8398b-9a6c-4a04-aca6-3265136bc2b2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-4addf8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-4addf8/rate-test-model-4addf8\",\"requestedSubscription\":\"e2e-rate-iso-b-3c4dbd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T19:42:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"96c8398b-9a6c-4a04-aca6-3265136bc2b2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4addf8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4addf8","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-3c4dbd","namespace":"ai-tenant-e2e-shared-b-4addf8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-4addf8/rate-test-model-4addf8"}} {"level":"debug","ts":"2026-07-22T19:42:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"96c8398b-9a6c-4a04-aca6-3265136bc2b2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:42:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96c8398b-9a6c-4a04-aca6-3265136bc2b2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:42:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96c8398b-9a6c-4a04-aca6-3265136bc2b2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:42:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96c8398b-9a6c-4a04-aca6-3265136bc2b2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4addf8/rate-test-model-4addf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4addf8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:42:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96c8398b-9a6c-4a04-aca6-3265136bc2b2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:42:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96c8398b-9a6c-4a04-aca6-3265136bc2b2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:42:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96c8398b-9a6c-4a04-aca6-3265136bc2b2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T19:42:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96c8398b-9a6c-4a04-aca6-3265136bc2b2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-3c4dbd"} {"level":"debug","ts":"2026-07-22T19:42:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96c8398b-9a6c-4a04-aca6-3265136bc2b2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6073c2bd-acc4-4e24-b779-df9f1fba93a3","keyName":"e2e-rate-b-3c4dbd","selected_subscription":"e2e-rate-iso-b-3c4dbd","selected_subscription_key":"ai-tenant-e2e-shared-b-4addf8/e2e-rate-iso-b-3c4dbd@ai-tenant-e2e-shared-b-4addf8/rate-test-model-4addf8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4addf8","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-3c4dbd","namespace":"ai-tenant-e2e-shared-b-4addf8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-4addf8/rate-test-model-4addf8"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T19:42:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96c8398b-9a6c-4a04-aca6-3265136bc2b2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:42:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96c8398b-9a6c-4a04-aca6-3265136bc2b2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aaa3b9673e57ce7cff6d1a58498ea2cc000fe90f8079ac358d6e5bd09e4682c7"} {"level":"info","ts":"2026-07-22T19:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80d2a02b60ca12ea48dd804932a1cc6d1d0a7c80fdd058a74f706bd2ace2f454"} {"level":"info","ts":"2026-07-22T19:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8b7beb1f7eed0ad0888d6e0020c1c5b49b2f2abd6d99e40555445105fb510d3"} {"level":"info","ts":"2026-07-22T19:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/531ce736cf7f626500a6306018d194272b9f1193156a3217bd6996e387dde808"} {"level":"info","ts":"2026-07-22T19:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3133e4378120bcb1d648f24d1198b5913cdb232fbf903dab78b02327a89b5b9f"} {"level":"info","ts":"2026-07-22T19:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5aa008ac3f152c9aca7677fbe2ca0a187e4e8c7696a87cf7358b2c6ae0af177c"} {"level":"info","ts":"2026-07-22T19:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80fa55660511da17887adb1aabea724fe5c431da42f38aa86221ea285492bca1"} {"level":"info","ts":"2026-07-22T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5f1a301ad648265155381f03263359706c47b8bbdab7283a88fe38af223b448"} {"level":"info","ts":"2026-07-22T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/037b9809902c46fc1971ab95220d7d202108bcf4b5cb5fc7543f5dfbd6966ba0"} {"level":"info","ts":"2026-07-22T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8244b09e54671a9c42855c90b255f8768d86d3df59716938911063e9661a89d9"} {"level":"info","ts":"2026-07-22T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfb70e28adb4cca1417d6015fdc843465514f4557d0638273a17a1ccd8389010"} {"level":"info","ts":"2026-07-22T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e7842b90ce769e9b916ce41456dc2db21509a182bb820c3bc83e3bb7eb30ec3"} {"level":"info","ts":"2026-07-22T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/19d31b3347cc3a4038e7364cc0d7282a1afd9895fa9f1ad4f0db4917fde1211c"} {"level":"info","ts":"2026-07-22T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/183a709f1bd4481de0af60806f19db7b92e497fa7c37fbb724e53baee2fc7cb2"} {"level":"info","ts":"2026-07-22T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/10b6239233615a269ee694d0ec86eeb670abf33d5c51565f309110b9a2046f92"} {"level":"info","ts":"2026-07-22T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5dfcdc157fb17d733fcdf888524c26a920e033fcc55ee109fc6277713564b249"} {"level":"info","ts":"2026-07-22T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/974fb0a350cc8f4cabf0c625b02b3c030ed2fc3913aebedcc8dac2ab1e6bc584"} {"level":"info","ts":"2026-07-22T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a65dc600f8f8220603f016bbdc3f6e084ad888e2939c2f43998f876e9297d95a"} {"level":"info","ts":"2026-07-22T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/960b4804a71311c4a4817a9ac17755fd6aeaf01d45b6eae1f25089592486dca2"} {"level":"info","ts":"2026-07-22T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6bb088ee5e2814a24abe6744f022f86e6d63e8fcee422c38479af150b2a4338d"} {"level":"info","ts":"2026-07-22T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b84388d151b5bcd0d42447fa553dc2fbf8a76dbea7516587c978603c82446a60"} {"level":"info","ts":"2026-07-22T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3968b1f8f40cadc712bd271b787f3a32137cfa476074e971bb88f3e3178e50fd"} {"level":"info","ts":"2026-07-22T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5bc1c00e2a4fe471e5a1f4f0e476c7e056274cb2ca88368fc95155e55de31f06"} {"level":"info","ts":"2026-07-22T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6898eac09e7a6cded27c16cece5c90a292bf863dee4276da7638c5d9d8a4f820"}