--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-11T08:19:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3debb32a0e0aa4f8b694f8d6fb7e6d83958f8ba76818da904ed7363a64d6c8c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:19:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3debb32a0e0aa4f8b694f8d6fb7e6d83958f8ba76818da904ed7363a64d6c8c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:19:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3debb32a0e0aa4f8b694f8d6fb7e6d83958f8ba76818da904ed7363a64d6c8c4"} {"level":"info","ts":"2026-07-11T08:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3e232ad4329d765bd850132f2bb7cb52b297e7b9d76aea5e0bcd65e4c79a8b5"} {"level":"info","ts":"2026-07-11T08:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e32b6d6e884d8343fe92f57d9a47dd794dc41df7a282e7e9b1e42f29d6fc21de"} {"level":"info","ts":"2026-07-11T08:19:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e66e321eac937e97f3f58c3c512d7fc78b721a8f93ea35116329971df93f1a1"} {"level":"info","ts":"2026-07-11T08:19:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c008c5d2a295d687d71d737e7afcef55deb39a2fd3b451a295ef2abee2bb5472"} {"level":"info","ts":"2026-07-11T08:20:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bbf958f7176c58b8a6a8b877831d6198df6a6e97e0e555ca9de29ebeaece9398"} {"level":"info","ts":"2026-07-11T08:20:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0c09592c60a6085266f45b2e600c73bb6d1a65fc6b9dd38c1f94d7930f5fbdb"} {"level":"info","ts":"2026-07-11T08:20:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3debb32a0e0aa4f8b694f8d6fb7e6d83958f8ba76818da904ed7363a64d6c8c4"} {"level":"info","ts":"2026-07-11T08:20:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e7275302f725ad8d46f2afdeba047f8f1cf50d0bdd9dbaa23f5cc3aa801747ff"} {"level":"debug","ts":"2026-07-11T08:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a52aea15035bd0b5c7f711f598017439b716a0965d0636518e42dac4f8104f6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a52aea15035bd0b5c7f711f598017439b716a0965d0636518e42dac4f8104f6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a52aea15035bd0b5c7f711f598017439b716a0965d0636518e42dac4f8104f6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a52aea15035bd0b5c7f711f598017439b716a0965d0636518e42dac4f8104f6a"} {"level":"info","ts":"2026-07-11T08:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a52aea15035bd0b5c7f711f598017439b716a0965d0636518e42dac4f8104f6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a52aea15035bd0b5c7f711f598017439b716a0965d0636518e42dac4f8104f6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-11T08:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a52aea15035bd0b5c7f711f598017439b716a0965d0636518e42dac4f8104f6a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a52aea15035bd0b5c7f711f598017439b716a0965d0636518e42dac4f8104f6a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-11T08:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a52aea15035bd0b5c7f711f598017439b716a0965d0636518e42dac4f8104f6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a52aea15035bd0b5c7f711f598017439b716a0965d0636518e42dac4f8104f6a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a52aea15035bd0b5c7f711f598017439b716a0965d0636518e42dac4f8104f6a"} {"level":"info","ts":"2026-07-11T08:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a52aea15035bd0b5c7f711f598017439b716a0965d0636518e42dac4f8104f6a"} {"level":"debug","ts":"2026-07-11T08:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457941a84d894e540cb0c890659b81b6c09e8dba28b5d30d7f2ed0327dde315d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"457941a84d894e540cb0c890659b81b6c09e8dba28b5d30d7f2ed0327dde315d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"331ba591023facc0632c94fd19b996e0daaefcb24f0949550ffe4ae0ea763e81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457941a84d894e540cb0c890659b81b6c09e8dba28b5d30d7f2ed0327dde315d"} {"level":"info","ts":"2026-07-11T08:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"331ba591023facc0632c94fd19b996e0daaefcb24f0949550ffe4ae0ea763e81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457941a84d894e540cb0c890659b81b6c09e8dba28b5d30d7f2ed0327dde315d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["457941a84d894e540cb0c890659b81b6c09e8dba28b5d30d7f2ed0327dde315d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"457941a84d894e540cb0c890659b81b6c09e8dba28b5d30d7f2ed0327dde315d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a52aea15035bd0b5c7f711f598017439b716a0965d0636518e42dac4f8104f6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a52aea15035bd0b5c7f711f598017439b716a0965d0636518e42dac4f8104f6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/331ba591023facc0632c94fd19b996e0daaefcb24f0949550ffe4ae0ea763e81"} {"level":"info","ts":"2026-07-11T08:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a52aea15035bd0b5c7f711f598017439b716a0965d0636518e42dac4f8104f6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"331ba591023facc0632c94fd19b996e0daaefcb24f0949550ffe4ae0ea763e81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["331ba591023facc0632c94fd19b996e0daaefcb24f0949550ffe4ae0ea763e81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"331ba591023facc0632c94fd19b996e0daaefcb24f0949550ffe4ae0ea763e81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457941a84d894e540cb0c890659b81b6c09e8dba28b5d30d7f2ed0327dde315d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457941a84d894e540cb0c890659b81b6c09e8dba28b5d30d7f2ed0327dde315d"} {"level":"info","ts":"2026-07-11T08:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"457941a84d894e540cb0c890659b81b6c09e8dba28b5d30d7f2ed0327dde315d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a52aea15035bd0b5c7f711f598017439b716a0965d0636518e42dac4f8104f6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"331ba591023facc0632c94fd19b996e0daaefcb24f0949550ffe4ae0ea763e81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"331ba591023facc0632c94fd19b996e0daaefcb24f0949550ffe4ae0ea763e81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457941a84d894e540cb0c890659b81b6c09e8dba28b5d30d7f2ed0327dde315d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["457941a84d894e540cb0c890659b81b6c09e8dba28b5d30d7f2ed0327dde315d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/331ba591023facc0632c94fd19b996e0daaefcb24f0949550ffe4ae0ea763e81"} {"level":"info","ts":"2026-07-11T08:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"457941a84d894e540cb0c890659b81b6c09e8dba28b5d30d7f2ed0327dde315d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"331ba591023facc0632c94fd19b996e0daaefcb24f0949550ffe4ae0ea763e81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["331ba591023facc0632c94fd19b996e0daaefcb24f0949550ffe4ae0ea763e81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"331ba591023facc0632c94fd19b996e0daaefcb24f0949550ffe4ae0ea763e81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"237b1fd00f08e4ee9f3f8033b92a9ff6c50908c804f0f2d17d6e0c870fdecf90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a52aea15035bd0b5c7f711f598017439b716a0965d0636518e42dac4f8104f6a"} {"level":"info","ts":"2026-07-11T08:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"237b1fd00f08e4ee9f3f8033b92a9ff6c50908c804f0f2d17d6e0c870fdecf90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457941a84d894e540cb0c890659b81b6c09e8dba28b5d30d7f2ed0327dde315d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457941a84d894e540cb0c890659b81b6c09e8dba28b5d30d7f2ed0327dde315d"} {"level":"info","ts":"2026-07-11T08:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"457941a84d894e540cb0c890659b81b6c09e8dba28b5d30d7f2ed0327dde315d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"331ba591023facc0632c94fd19b996e0daaefcb24f0949550ffe4ae0ea763e81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"331ba591023facc0632c94fd19b996e0daaefcb24f0949550ffe4ae0ea763e81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"237b1fd00f08e4ee9f3f8033b92a9ff6c50908c804f0f2d17d6e0c870fdecf90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457941a84d894e540cb0c890659b81b6c09e8dba28b5d30d7f2ed0327dde315d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["457941a84d894e540cb0c890659b81b6c09e8dba28b5d30d7f2ed0327dde315d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"457941a84d894e540cb0c890659b81b6c09e8dba28b5d30d7f2ed0327dde315d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"331ba591023facc0632c94fd19b996e0daaefcb24f0949550ffe4ae0ea763e81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"237b1fd00f08e4ee9f3f8033b92a9ff6c50908c804f0f2d17d6e0c870fdecf90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"457941a84d894e540cb0c890659b81b6c09e8dba28b5d30d7f2ed0327dde315d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/331ba591023facc0632c94fd19b996e0daaefcb24f0949550ffe4ae0ea763e81"} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"331ba591023facc0632c94fd19b996e0daaefcb24f0949550ffe4ae0ea763e81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["331ba591023facc0632c94fd19b996e0daaefcb24f0949550ffe4ae0ea763e81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"331ba591023facc0632c94fd19b996e0daaefcb24f0949550ffe4ae0ea763e81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"237b1fd00f08e4ee9f3f8033b92a9ff6c50908c804f0f2d17d6e0c870fdecf90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/237b1fd00f08e4ee9f3f8033b92a9ff6c50908c804f0f2d17d6e0c870fdecf90"} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"237b1fd00f08e4ee9f3f8033b92a9ff6c50908c804f0f2d17d6e0c870fdecf90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"331ba591023facc0632c94fd19b996e0daaefcb24f0949550ffe4ae0ea763e81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457941a84d894e540cb0c890659b81b6c09e8dba28b5d30d7f2ed0327dde315d"} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"237b1fd00f08e4ee9f3f8033b92a9ff6c50908c804f0f2d17d6e0c870fdecf90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["237b1fd00f08e4ee9f3f8033b92a9ff6c50908c804f0f2d17d6e0c870fdecf90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"237b1fd00f08e4ee9f3f8033b92a9ff6c50908c804f0f2d17d6e0c870fdecf90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"237b1fd00f08e4ee9f3f8033b92a9ff6c50908c804f0f2d17d6e0c870fdecf90","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/331ba591023facc0632c94fd19b996e0daaefcb24f0949550ffe4ae0ea763e81"} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"237b1fd00f08e4ee9f3f8033b92a9ff6c50908c804f0f2d17d6e0c870fdecf90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1"} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/237b1fd00f08e4ee9f3f8033b92a9ff6c50908c804f0f2d17d6e0c870fdecf90"} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1"} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1"} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1"} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1"} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1"} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6db6b29718073e245ba25fa3aca1285ab8534cae1ff1c125d8384a7a277a7331","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6db6b29718073e245ba25fa3aca1285ab8534cae1ff1c125d8384a7a277a7331","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6db6b29718073e245ba25fa3aca1285ab8534cae1ff1c125d8384a7a277a7331","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6db6b29718073e245ba25fa3aca1285ab8534cae1ff1c125d8384a7a277a7331","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1"} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6db6b29718073e245ba25fa3aca1285ab8534cae1ff1c125d8384a7a277a7331","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6db6b29718073e245ba25fa3aca1285ab8534cae1ff1c125d8384a7a277a7331","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6db6b29718073e245ba25fa3aca1285ab8534cae1ff1c125d8384a7a277a7331"} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6db6b29718073e245ba25fa3aca1285ab8534cae1ff1c125d8384a7a277a7331","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6db6b29718073e245ba25fa3aca1285ab8534cae1ff1c125d8384a7a277a7331"} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6db6b29718073e245ba25fa3aca1285ab8534cae1ff1c125d8384a7a277a7331","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6db6b29718073e245ba25fa3aca1285ab8534cae1ff1c125d8384a7a277a7331"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6db6b29718073e245ba25fa3aca1285ab8534cae1ff1c125d8384a7a277a7331","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6db6b29718073e245ba25fa3aca1285ab8534cae1ff1c125d8384a7a277a7331","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1"} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6db6b29718073e245ba25fa3aca1285ab8534cae1ff1c125d8384a7a277a7331"} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3"} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3"} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3"} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2"} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3"} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2"} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3"} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2"} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2b542b9f4ab6508e460a2b03b9cdc150959f496cf96da98707ad3d13dbe3642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2"} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2b542b9f4ab6508e460a2b03b9cdc150959f496cf96da98707ad3d13dbe3642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2b542b9f4ab6508e460a2b03b9cdc150959f496cf96da98707ad3d13dbe3642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2b542b9f4ab6508e460a2b03b9cdc150959f496cf96da98707ad3d13dbe3642"} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2b542b9f4ab6508e460a2b03b9cdc150959f496cf96da98707ad3d13dbe3642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2"} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2b542b9f4ab6508e460a2b03b9cdc150959f496cf96da98707ad3d13dbe3642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2b542b9f4ab6508e460a2b03b9cdc150959f496cf96da98707ad3d13dbe3642"} {"level":"error","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2b542b9f4ab6508e460a2b03b9cdc150959f496cf96da98707ad3d13dbe3642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2b542b9f4ab6508e460a2b03b9cdc150959f496cf96da98707ad3d13dbe3642"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2b542b9f4ab6508e460a2b03b9cdc150959f496cf96da98707ad3d13dbe3642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2"} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2b542b9f4ab6508e460a2b03b9cdc150959f496cf96da98707ad3d13dbe3642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2b542b9f4ab6508e460a2b03b9cdc150959f496cf96da98707ad3d13dbe3642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dffd97a8fae9d9e970a07b6079a1ffd3c15e0e46e46db4573b9445591390d387","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2b542b9f4ab6508e460a2b03b9cdc150959f496cf96da98707ad3d13dbe3642"} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dffd97a8fae9d9e970a07b6079a1ffd3c15e0e46e46db4573b9445591390d387","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dffd97a8fae9d9e970a07b6079a1ffd3c15e0e46e46db4573b9445591390d387"} {"level":"info","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2b542b9f4ab6508e460a2b03b9cdc150959f496cf96da98707ad3d13dbe3642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2b542b9f4ab6508e460a2b03b9cdc150959f496cf96da98707ad3d13dbe3642"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2"} {"level":"info","ts":"2026-07-11T08:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2b542b9f4ab6508e460a2b03b9cdc150959f496cf96da98707ad3d13dbe3642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dffd97a8fae9d9e970a07b6079a1ffd3c15e0e46e46db4573b9445591390d387","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dffd97a8fae9d9e970a07b6079a1ffd3c15e0e46e46db4573b9445591390d387"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2b542b9f4ab6508e460a2b03b9cdc150959f496cf96da98707ad3d13dbe3642"} {"level":"info","ts":"2026-07-11T08:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dffd97a8fae9d9e970a07b6079a1ffd3c15e0e46e46db4573b9445591390d387"} {"level":"info","ts":"2026-07-11T08:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dffd97a8fae9d9e970a07b6079a1ffd3c15e0e46e46db4573b9445591390d387","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2"} {"level":"info","ts":"2026-07-11T08:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2b542b9f4ab6508e460a2b03b9cdc150959f496cf96da98707ad3d13dbe3642"} {"level":"info","ts":"2026-07-11T08:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2b542b9f4ab6508e460a2b03b9cdc150959f496cf96da98707ad3d13dbe3642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e60995411260d4beeaeaf7fd4140eca702a9c8169d9a67e3e6181675f9e5c5de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e60995411260d4beeaeaf7fd4140eca702a9c8169d9a67e3e6181675f9e5c5de"} {"level":"info","ts":"2026-07-11T08:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dfafc3fefb7fb9f281c6f95903d40378c740cbab954b37ea002490b9b969aab"} {"level":"info","ts":"2026-07-11T08:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dffd97a8fae9d9e970a07b6079a1ffd3c15e0e46e46db4573b9445591390d387"} {"level":"info","ts":"2026-07-11T08:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e60995411260d4beeaeaf7fd4140eca702a9c8169d9a67e3e6181675f9e5c5de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dfafc3fefb7fb9f281c6f95903d40378c740cbab954b37ea002490b9b969aab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dfafc3fefb7fb9f281c6f95903d40378c740cbab954b37ea002490b9b969aab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2"} {"level":"info","ts":"2026-07-11T08:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e60995411260d4beeaeaf7fd4140eca702a9c8169d9a67e3e6181675f9e5c5de"} {"level":"info","ts":"2026-07-11T08:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dfafc3fefb7fb9f281c6f95903d40378c740cbab954b37ea002490b9b969aab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dffd97a8fae9d9e970a07b6079a1ffd3c15e0e46e46db4573b9445591390d387","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dfafc3fefb7fb9f281c6f95903d40378c740cbab954b37ea002490b9b969aab"} {"level":"info","ts":"2026-07-11T08:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e60995411260d4beeaeaf7fd4140eca702a9c8169d9a67e3e6181675f9e5c5de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e60995411260d4beeaeaf7fd4140eca702a9c8169d9a67e3e6181675f9e5c5de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2"} {"level":"info","ts":"2026-07-11T08:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e60995411260d4beeaeaf7fd4140eca702a9c8169d9a67e3e6181675f9e5c5de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dfafc3fefb7fb9f281c6f95903d40378c740cbab954b37ea002490b9b969aab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e60995411260d4beeaeaf7fd4140eca702a9c8169d9a67e3e6181675f9e5c5de","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e60995411260d4beeaeaf7fd4140eca702a9c8169d9a67e3e6181675f9e5c5de"} {"level":"debug","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ce85d8dd693161ed0285529984651cccc1c2361ccacd85e0438c4615fa5b830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ce85d8dd693161ed0285529984651cccc1c2361ccacd85e0438c4615fa5b830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ce85d8dd693161ed0285529984651cccc1c2361ccacd85e0438c4615fa5b830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ce85d8dd693161ed0285529984651cccc1c2361ccacd85e0438c4615fa5b830","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ce85d8dd693161ed0285529984651cccc1c2361ccacd85e0438c4615fa5b830"} {"level":"debug","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ce85d8dd693161ed0285529984651cccc1c2361ccacd85e0438c4615fa5b830","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ce85d8dd693161ed0285529984651cccc1c2361ccacd85e0438c4615fa5b830"} {"level":"debug","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ce85d8dd693161ed0285529984651cccc1c2361ccacd85e0438c4615fa5b830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ce85d8dd693161ed0285529984651cccc1c2361ccacd85e0438c4615fa5b830"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ce85d8dd693161ed0285529984651cccc1c2361ccacd85e0438c4615fa5b830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ce85d8dd693161ed0285529984651cccc1c2361ccacd85e0438c4615fa5b830","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ce85d8dd693161ed0285529984651cccc1c2361ccacd85e0438c4615fa5b830"} {"level":"debug","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56a4ea2af2afeab55efe74db818156bc722dd158fefc3c33a590fa1e7da48293","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56a4ea2af2afeab55efe74db818156bc722dd158fefc3c33a590fa1e7da48293","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5814f183426399de685a6436dbf8fc090572653ecab4456ce60d261769ac84cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5814f183426399de685a6436dbf8fc090572653ecab4456ce60d261769ac84cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56a4ea2af2afeab55efe74db818156bc722dd158fefc3c33a590fa1e7da48293","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56a4ea2af2afeab55efe74db818156bc722dd158fefc3c33a590fa1e7da48293"} {"level":"debug","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5814f183426399de685a6436dbf8fc090572653ecab4456ce60d261769ac84cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5814f183426399de685a6436dbf8fc090572653ecab4456ce60d261769ac84cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56a4ea2af2afeab55efe74db818156bc722dd158fefc3c33a590fa1e7da48293","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56a4ea2af2afeab55efe74db818156bc722dd158fefc3c33a590fa1e7da48293"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56a4ea2af2afeab55efe74db818156bc722dd158fefc3c33a590fa1e7da48293","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5814f183426399de685a6436dbf8fc090572653ecab4456ce60d261769ac84cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56a4ea2af2afeab55efe74db818156bc722dd158fefc3c33a590fa1e7da48293","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5814f183426399de685a6436dbf8fc090572653ecab4456ce60d261769ac84cb"} {"level":"debug","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5814f183426399de685a6436dbf8fc090572653ecab4456ce60d261769ac84cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5814f183426399de685a6436dbf8fc090572653ecab4456ce60d261769ac84cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56a4ea2af2afeab55efe74db818156bc722dd158fefc3c33a590fa1e7da48293"} {"level":"info","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5814f183426399de685a6436dbf8fc090572653ecab4456ce60d261769ac84cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5814f183426399de685a6436dbf8fc090572653ecab4456ce60d261769ac84cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5814f183426399de685a6436dbf8fc090572653ecab4456ce60d261769ac84cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c4b9de23ec0e1424638a47368ff2740bdc1bf24f0a906ce9e87b8e083df8ac9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c4b9de23ec0e1424638a47368ff2740bdc1bf24f0a906ce9e87b8e083df8ac9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5814f183426399de685a6436dbf8fc090572653ecab4456ce60d261769ac84cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5814f183426399de685a6436dbf8fc090572653ecab4456ce60d261769ac84cb"} {"level":"debug","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c4b9de23ec0e1424638a47368ff2740bdc1bf24f0a906ce9e87b8e083df8ac9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c4b9de23ec0e1424638a47368ff2740bdc1bf24f0a906ce9e87b8e083df8ac9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5814f183426399de685a6436dbf8fc090572653ecab4456ce60d261769ac84cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5814f183426399de685a6436dbf8fc090572653ecab4456ce60d261769ac84cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c4b9de23ec0e1424638a47368ff2740bdc1bf24f0a906ce9e87b8e083df8ac9"} {"level":"info","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5814f183426399de685a6436dbf8fc090572653ecab4456ce60d261769ac84cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c4b9de23ec0e1424638a47368ff2740bdc1bf24f0a906ce9e87b8e083df8ac9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c4b9de23ec0e1424638a47368ff2740bdc1bf24f0a906ce9e87b8e083df8ac9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c4b9de23ec0e1424638a47368ff2740bdc1bf24f0a906ce9e87b8e083df8ac9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5814f183426399de685a6436dbf8fc090572653ecab4456ce60d261769ac84cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5814f183426399de685a6436dbf8fc090572653ecab4456ce60d261769ac84cb"} {"level":"info","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5814f183426399de685a6436dbf8fc090572653ecab4456ce60d261769ac84cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c4b9de23ec0e1424638a47368ff2740bdc1bf24f0a906ce9e87b8e083df8ac9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c4b9de23ec0e1424638a47368ff2740bdc1bf24f0a906ce9e87b8e083df8ac9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5814f183426399de685a6436dbf8fc090572653ecab4456ce60d261769ac84cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5814f183426399de685a6436dbf8fc090572653ecab4456ce60d261769ac84cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c4b9de23ec0e1424638a47368ff2740bdc1bf24f0a906ce9e87b8e083df8ac9"} {"level":"info","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5814f183426399de685a6436dbf8fc090572653ecab4456ce60d261769ac84cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c4b9de23ec0e1424638a47368ff2740bdc1bf24f0a906ce9e87b8e083df8ac9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c4b9de23ec0e1424638a47368ff2740bdc1bf24f0a906ce9e87b8e083df8ac9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c4b9de23ec0e1424638a47368ff2740bdc1bf24f0a906ce9e87b8e083df8ac9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5814f183426399de685a6436dbf8fc090572653ecab4456ce60d261769ac84cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5814f183426399de685a6436dbf8fc090572653ecab4456ce60d261769ac84cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1227cafbeba22680bf039805f5323b5decbdef632326f41e7a5f37e4032b54c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5814f183426399de685a6436dbf8fc090572653ecab4456ce60d261769ac84cb"} {"level":"info","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1227cafbeba22680bf039805f5323b5decbdef632326f41e7a5f37e4032b54c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c4b9de23ec0e1424638a47368ff2740bdc1bf24f0a906ce9e87b8e083df8ac9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c4b9de23ec0e1424638a47368ff2740bdc1bf24f0a906ce9e87b8e083df8ac9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5814f183426399de685a6436dbf8fc090572653ecab4456ce60d261769ac84cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5814f183426399de685a6436dbf8fc090572653ecab4456ce60d261769ac84cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c4b9de23ec0e1424638a47368ff2740bdc1bf24f0a906ce9e87b8e083df8ac9"} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5814f183426399de685a6436dbf8fc090572653ecab4456ce60d261769ac84cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1227cafbeba22680bf039805f5323b5decbdef632326f41e7a5f37e4032b54c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1227cafbeba22680bf039805f5323b5decbdef632326f41e7a5f37e4032b54c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c4b9de23ec0e1424638a47368ff2740bdc1bf24f0a906ce9e87b8e083df8ac9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c4b9de23ec0e1424638a47368ff2740bdc1bf24f0a906ce9e87b8e083df8ac9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c4b9de23ec0e1424638a47368ff2740bdc1bf24f0a906ce9e87b8e083df8ac9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5814f183426399de685a6436dbf8fc090572653ecab4456ce60d261769ac84cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1227cafbeba22680bf039805f5323b5decbdef632326f41e7a5f37e4032b54c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1227cafbeba22680bf039805f5323b5decbdef632326f41e7a5f37e4032b54c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c4b9de23ec0e1424638a47368ff2740bdc1bf24f0a906ce9e87b8e083df8ac9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32aa78506e2c392742358e454be340e66f5eb7b98c51a0c96c5901f7ce9c91ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1227cafbeba22680bf039805f5323b5decbdef632326f41e7a5f37e4032b54c5"} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32aa78506e2c392742358e454be340e66f5eb7b98c51a0c96c5901f7ce9c91ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32aa78506e2c392742358e454be340e66f5eb7b98c51a0c96c5901f7ce9c91ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32aa78506e2c392742358e454be340e66f5eb7b98c51a0c96c5901f7ce9c91ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1227cafbeba22680bf039805f5323b5decbdef632326f41e7a5f37e4032b54c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1227cafbeba22680bf039805f5323b5decbdef632326f41e7a5f37e4032b54c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1227cafbeba22680bf039805f5323b5decbdef632326f41e7a5f37e4032b54c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32aa78506e2c392742358e454be340e66f5eb7b98c51a0c96c5901f7ce9c91ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1227cafbeba22680bf039805f5323b5decbdef632326f41e7a5f37e4032b54c5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5814f183426399de685a6436dbf8fc090572653ecab4456ce60d261769ac84cb"} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c4b9de23ec0e1424638a47368ff2740bdc1bf24f0a906ce9e87b8e083df8ac9"} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32aa78506e2c392742358e454be340e66f5eb7b98c51a0c96c5901f7ce9c91ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32aa78506e2c392742358e454be340e66f5eb7b98c51a0c96c5901f7ce9c91ae"} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32aa78506e2c392742358e454be340e66f5eb7b98c51a0c96c5901f7ce9c91ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98c77c2aba54dd989bfdcc6ea7ff7e94844e084ce0dc2cf93c8b6785225d8e41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1227cafbeba22680bf039805f5323b5decbdef632326f41e7a5f37e4032b54c5"} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98c77c2aba54dd989bfdcc6ea7ff7e94844e084ce0dc2cf93c8b6785225d8e41","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32aa78506e2c392742358e454be340e66f5eb7b98c51a0c96c5901f7ce9c91ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32aa78506e2c392742358e454be340e66f5eb7b98c51a0c96c5901f7ce9c91ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32aa78506e2c392742358e454be340e66f5eb7b98c51a0c96c5901f7ce9c91ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98c77c2aba54dd989bfdcc6ea7ff7e94844e084ce0dc2cf93c8b6785225d8e41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98c77c2aba54dd989bfdcc6ea7ff7e94844e084ce0dc2cf93c8b6785225d8e41"} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98c77c2aba54dd989bfdcc6ea7ff7e94844e084ce0dc2cf93c8b6785225d8e41","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32aa78506e2c392742358e454be340e66f5eb7b98c51a0c96c5901f7ce9c91ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32aa78506e2c392742358e454be340e66f5eb7b98c51a0c96c5901f7ce9c91ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98c77c2aba54dd989bfdcc6ea7ff7e94844e084ce0dc2cf93c8b6785225d8e41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98c77c2aba54dd989bfdcc6ea7ff7e94844e084ce0dc2cf93c8b6785225d8e41"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32aa78506e2c392742358e454be340e66f5eb7b98c51a0c96c5901f7ce9c91ae"} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98c77c2aba54dd989bfdcc6ea7ff7e94844e084ce0dc2cf93c8b6785225d8e41","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32aa78506e2c392742358e454be340e66f5eb7b98c51a0c96c5901f7ce9c91ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32aa78506e2c392742358e454be340e66f5eb7b98c51a0c96c5901f7ce9c91ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32aa78506e2c392742358e454be340e66f5eb7b98c51a0c96c5901f7ce9c91ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98c77c2aba54dd989bfdcc6ea7ff7e94844e084ce0dc2cf93c8b6785225d8e41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98c77c2aba54dd989bfdcc6ea7ff7e94844e084ce0dc2cf93c8b6785225d8e41"} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98c77c2aba54dd989bfdcc6ea7ff7e94844e084ce0dc2cf93c8b6785225d8e41","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32aa78506e2c392742358e454be340e66f5eb7b98c51a0c96c5901f7ce9c91ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32aa78506e2c392742358e454be340e66f5eb7b98c51a0c96c5901f7ce9c91ae"} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32aa78506e2c392742358e454be340e66f5eb7b98c51a0c96c5901f7ce9c91ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98c77c2aba54dd989bfdcc6ea7ff7e94844e084ce0dc2cf93c8b6785225d8e41","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32aa78506e2c392742358e454be340e66f5eb7b98c51a0c96c5901f7ce9c91ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32aa78506e2c392742358e454be340e66f5eb7b98c51a0c96c5901f7ce9c91ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32aa78506e2c392742358e454be340e66f5eb7b98c51a0c96c5901f7ce9c91ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06d1b5d9d009d5f26f906ed7698c8f7a0c3d74c322eab01f6b334398272b088a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98c77c2aba54dd989bfdcc6ea7ff7e94844e084ce0dc2cf93c8b6785225d8e41"} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06d1b5d9d009d5f26f906ed7698c8f7a0c3d74c322eab01f6b334398272b088a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98c77c2aba54dd989bfdcc6ea7ff7e94844e084ce0dc2cf93c8b6785225d8e41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98c77c2aba54dd989bfdcc6ea7ff7e94844e084ce0dc2cf93c8b6785225d8e41"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32aa78506e2c392742358e454be340e66f5eb7b98c51a0c96c5901f7ce9c91ae"} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98c77c2aba54dd989bfdcc6ea7ff7e94844e084ce0dc2cf93c8b6785225d8e41","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32aa78506e2c392742358e454be340e66f5eb7b98c51a0c96c5901f7ce9c91ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06d1b5d9d009d5f26f906ed7698c8f7a0c3d74c322eab01f6b334398272b088a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06d1b5d9d009d5f26f906ed7698c8f7a0c3d74c322eab01f6b334398272b088a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98c77c2aba54dd989bfdcc6ea7ff7e94844e084ce0dc2cf93c8b6785225d8e41","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06d1b5d9d009d5f26f906ed7698c8f7a0c3d74c322eab01f6b334398272b088a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06d1b5d9d009d5f26f906ed7698c8f7a0c3d74c322eab01f6b334398272b088a"} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06d1b5d9d009d5f26f906ed7698c8f7a0c3d74c322eab01f6b334398272b088a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06d1b5d9d009d5f26f906ed7698c8f7a0c3d74c322eab01f6b334398272b088a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06d1b5d9d009d5f26f906ed7698c8f7a0c3d74c322eab01f6b334398272b088a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06d1b5d9d009d5f26f906ed7698c8f7a0c3d74c322eab01f6b334398272b088a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98c77c2aba54dd989bfdcc6ea7ff7e94844e084ce0dc2cf93c8b6785225d8e41"} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb7bc3f55a867d51062c6cc407bd185b2961b0bcd9002ac6b91fc2c491a42d6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06d1b5d9d009d5f26f906ed7698c8f7a0c3d74c322eab01f6b334398272b088a"} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb7bc3f55a867d51062c6cc407bd185b2961b0bcd9002ac6b91fc2c491a42d6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb7bc3f55a867d51062c6cc407bd185b2961b0bcd9002ac6b91fc2c491a42d6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb7bc3f55a867d51062c6cc407bd185b2961b0bcd9002ac6b91fc2c491a42d6c"} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb7bc3f55a867d51062c6cc407bd185b2961b0bcd9002ac6b91fc2c491a42d6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb7bc3f55a867d51062c6cc407bd185b2961b0bcd9002ac6b91fc2c491a42d6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"eb7bc3f55a867d51062c6cc407bd185b2961b0bcd9002ac6b91fc2c491a42d6c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"eb7bc3f55a867d51062c6cc407bd185b2961b0bcd9002ac6b91fc2c491a42d6c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb7bc3f55a867d51062c6cc407bd185b2961b0bcd9002ac6b91fc2c491a42d6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb7bc3f55a867d51062c6cc407bd185b2961b0bcd9002ac6b91fc2c491a42d6c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb7bc3f55a867d51062c6cc407bd185b2961b0bcd9002ac6b91fc2c491a42d6c"} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb7bc3f55a867d51062c6cc407bd185b2961b0bcd9002ac6b91fc2c491a42d6c"} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb7bc3f55a867d51062c6cc407bd185b2961b0bcd9002ac6b91fc2c491a42d6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb7bc3f55a867d51062c6cc407bd185b2961b0bcd9002ac6b91fc2c491a42d6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb7bc3f55a867d51062c6cc407bd185b2961b0bcd9002ac6b91fc2c491a42d6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb7bc3f55a867d51062c6cc407bd185b2961b0bcd9002ac6b91fc2c491a42d6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb7bc3f55a867d51062c6cc407bd185b2961b0bcd9002ac6b91fc2c491a42d6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb7bc3f55a867d51062c6cc407bd185b2961b0bcd9002ac6b91fc2c491a42d6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb7bc3f55a867d51062c6cc407bd185b2961b0bcd9002ac6b91fc2c491a42d6c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb7bc3f55a867d51062c6cc407bd185b2961b0bcd9002ac6b91fc2c491a42d6c"} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb7bc3f55a867d51062c6cc407bd185b2961b0bcd9002ac6b91fc2c491a42d6c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb7bc3f55a867d51062c6cc407bd185b2961b0bcd9002ac6b91fc2c491a42d6c"} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb7bc3f55a867d51062c6cc407bd185b2961b0bcd9002ac6b91fc2c491a42d6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb7bc3f55a867d51062c6cc407bd185b2961b0bcd9002ac6b91fc2c491a42d6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb7bc3f55a867d51062c6cc407bd185b2961b0bcd9002ac6b91fc2c491a42d6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb7bc3f55a867d51062c6cc407bd185b2961b0bcd9002ac6b91fc2c491a42d6c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb7bc3f55a867d51062c6cc407bd185b2961b0bcd9002ac6b91fc2c491a42d6c"} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85528ad53bca92744f5b81b254f121dc2bf3a044108c7c46b8d7f88a9261e697","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85528ad53bca92744f5b81b254f121dc2bf3a044108c7c46b8d7f88a9261e697","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85528ad53bca92744f5b81b254f121dc2bf3a044108c7c46b8d7f88a9261e697","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85528ad53bca92744f5b81b254f121dc2bf3a044108c7c46b8d7f88a9261e697","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85528ad53bca92744f5b81b254f121dc2bf3a044108c7c46b8d7f88a9261e697"} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85528ad53bca92744f5b81b254f121dc2bf3a044108c7c46b8d7f88a9261e697","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85528ad53bca92744f5b81b254f121dc2bf3a044108c7c46b8d7f88a9261e697"} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85528ad53bca92744f5b81b254f121dc2bf3a044108c7c46b8d7f88a9261e697","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85528ad53bca92744f5b81b254f121dc2bf3a044108c7c46b8d7f88a9261e697"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85528ad53bca92744f5b81b254f121dc2bf3a044108c7c46b8d7f88a9261e697","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85528ad53bca92744f5b81b254f121dc2bf3a044108c7c46b8d7f88a9261e697","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38fd9ee1b38b02f47417ef7d0628d20ae6a21769dd8d2e209f479b0cea50d9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38fd9ee1b38b02f47417ef7d0628d20ae6a21769dd8d2e209f479b0cea50d9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38fd9ee1b38b02f47417ef7d0628d20ae6a21769dd8d2e209f479b0cea50d9a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85528ad53bca92744f5b81b254f121dc2bf3a044108c7c46b8d7f88a9261e697"} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38fd9ee1b38b02f47417ef7d0628d20ae6a21769dd8d2e209f479b0cea50d9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38fd9ee1b38b02f47417ef7d0628d20ae6a21769dd8d2e209f479b0cea50d9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38fd9ee1b38b02f47417ef7d0628d20ae6a21769dd8d2e209f479b0cea50d9a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38fd9ee1b38b02f47417ef7d0628d20ae6a21769dd8d2e209f479b0cea50d9a"} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38fd9ee1b38b02f47417ef7d0628d20ae6a21769dd8d2e209f479b0cea50d9a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38fd9ee1b38b02f47417ef7d0628d20ae6a21769dd8d2e209f479b0cea50d9a"} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"853646085dd3ad6f1705cfb7b03650a1570d27f7df7276f9d6cedc2325fc080c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"853646085dd3ad6f1705cfb7b03650a1570d27f7df7276f9d6cedc2325fc080c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"853646085dd3ad6f1705cfb7b03650a1570d27f7df7276f9d6cedc2325fc080c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/853646085dd3ad6f1705cfb7b03650a1570d27f7df7276f9d6cedc2325fc080c"} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"853646085dd3ad6f1705cfb7b03650a1570d27f7df7276f9d6cedc2325fc080c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"853646085dd3ad6f1705cfb7b03650a1570d27f7df7276f9d6cedc2325fc080c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"853646085dd3ad6f1705cfb7b03650a1570d27f7df7276f9d6cedc2325fc080c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"853646085dd3ad6f1705cfb7b03650a1570d27f7df7276f9d6cedc2325fc080c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38fd9ee1b38b02f47417ef7d0628d20ae6a21769dd8d2e209f479b0cea50d9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e38fd9ee1b38b02f47417ef7d0628d20ae6a21769dd8d2e209f479b0cea50d9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/853646085dd3ad6f1705cfb7b03650a1570d27f7df7276f9d6cedc2325fc080c"} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38fd9ee1b38b02f47417ef7d0628d20ae6a21769dd8d2e209f479b0cea50d9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"853646085dd3ad6f1705cfb7b03650a1570d27f7df7276f9d6cedc2325fc080c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38fd9ee1b38b02f47417ef7d0628d20ae6a21769dd8d2e209f479b0cea50d9a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/853646085dd3ad6f1705cfb7b03650a1570d27f7df7276f9d6cedc2325fc080c"} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38fd9ee1b38b02f47417ef7d0628d20ae6a21769dd8d2e209f479b0cea50d9a"} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"853646085dd3ad6f1705cfb7b03650a1570d27f7df7276f9d6cedc2325fc080c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["853646085dd3ad6f1705cfb7b03650a1570d27f7df7276f9d6cedc2325fc080c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"853646085dd3ad6f1705cfb7b03650a1570d27f7df7276f9d6cedc2325fc080c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"853646085dd3ad6f1705cfb7b03650a1570d27f7df7276f9d6cedc2325fc080c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:21:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"853646085dd3ad6f1705cfb7b03650a1570d27f7df7276f9d6cedc2325fc080c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"853646085dd3ad6f1705cfb7b03650a1570d27f7df7276f9d6cedc2325fc080c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"853646085dd3ad6f1705cfb7b03650a1570d27f7df7276f9d6cedc2325fc080c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/853646085dd3ad6f1705cfb7b03650a1570d27f7df7276f9d6cedc2325fc080c"} {"level":"debug","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"853646085dd3ad6f1705cfb7b03650a1570d27f7df7276f9d6cedc2325fc080c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/853646085dd3ad6f1705cfb7b03650a1570d27f7df7276f9d6cedc2325fc080c"} {"level":"debug","ts":"2026-07-11T08:21:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"853646085dd3ad6f1705cfb7b03650a1570d27f7df7276f9d6cedc2325fc080c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:21:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:21:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["853646085dd3ad6f1705cfb7b03650a1570d27f7df7276f9d6cedc2325fc080c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:21:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"853646085dd3ad6f1705cfb7b03650a1570d27f7df7276f9d6cedc2325fc080c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:21:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"853646085dd3ad6f1705cfb7b03650a1570d27f7df7276f9d6cedc2325fc080c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:21:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/853646085dd3ad6f1705cfb7b03650a1570d27f7df7276f9d6cedc2325fc080c"} {"level":"info","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c12bd66f-870d-43e1-b313-175a1916e2e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:50566","PortSpecifier":{"PortValue":50566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c12bd66f-870d-43e1-b313-175a1916e2e5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c12bd66f-870d-43e1-b313-175a1916e2e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:50566","PortSpecifier":{"PortValue":50566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783758113,"nanos":386773278},"http":{"id":"c12bd66f-870d-43e1-b313-175a1916e2e5","method":"POST","headers":{":authority":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c12bd66f-870d-43e1-b313-175a1916e2e5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c12bd66f-870d-43e1-b313-175a1916e2e5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"]}} {"level":"debug","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c12bd66f-870d-43e1-b313-175a1916e2e5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c12bd66f-870d-43e1-b313-175a1916e2e5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c12bd66f-870d-43e1-b313-175a1916e2e5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c12bd66f-870d-43e1-b313-175a1916e2e5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f178a6/auth-test-model-f178a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c12bd66f-870d-43e1-b313-175a1916e2e5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c12bd66f-870d-43e1-b313-175a1916e2e5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c12bd66f-870d-43e1-b313-175a1916e2e5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c12bd66f-870d-43e1-b313-175a1916e2e5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c12bd66f-870d-43e1-b313-175a1916e2e5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c495c3a-8a91-4df4-9cbc-109927540a71","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:52208","PortSpecifier":{"PortValue":52208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2c495c3a-8a91-4df4-9cbc-109927540a71","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c495c3a-8a91-4df4-9cbc-109927540a71","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:52208","PortSpecifier":{"PortValue":52208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783758113,"nanos":444170910},"http":{"id":"2c495c3a-8a91-4df4-9cbc-109927540a71","method":"POST","headers":{":authority":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2c495c3a-8a91-4df4-9cbc-109927540a71","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2c495c3a-8a91-4df4-9cbc-109927540a71","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"]}} {"level":"debug","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2c495c3a-8a91-4df4-9cbc-109927540a71","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"06d1b5d9d009d5f26f906ed7698c8f7a0c3d74c322eab01f6b334398272b088a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c495c3a-8a91-4df4-9cbc-109927540a71","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c495c3a-8a91-4df4-9cbc-109927540a71","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c495c3a-8a91-4df4-9cbc-109927540a71","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-12fff0/auth-test-model-12fff0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2c495c3a-8a91-4df4-9cbc-109927540a71","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c495c3a-8a91-4df4-9cbc-109927540a71","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c495c3a-8a91-4df4-9cbc-109927540a71","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c495c3a-8a91-4df4-9cbc-109927540a71","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c495c3a-8a91-4df4-9cbc-109927540a71","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"335b3c8c-8735-4a91-aa22-e7faa1693411","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:50576","PortSpecifier":{"PortValue":50576}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"335b3c8c-8735-4a91-aa22-e7faa1693411","method":"GET","path":"/maas-api/v1/api-keys/9b24e29b-f55e-4eb0-8608-f01339baf972","host":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"335b3c8c-8735-4a91-aa22-e7faa1693411","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:50576","PortSpecifier":{"PortValue":50576}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783758113,"nanos":507211800},"http":{"id":"335b3c8c-8735-4a91-aa22-e7faa1693411","method":"GET","headers":{":authority":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9b24e29b-f55e-4eb0-8608-f01339baf972",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"335b3c8c-8735-4a91-aa22-e7faa1693411","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"335b3c8c-8735-4a91-aa22-e7faa1693411","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"]}} {"level":"debug","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"335b3c8c-8735-4a91-aa22-e7faa1693411","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9b24e29b-f55e-4eb0-8608-f01339baf972",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"335b3c8c-8735-4a91-aa22-e7faa1693411","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"335b3c8c-8735-4a91-aa22-e7faa1693411","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"335b3c8c-8735-4a91-aa22-e7faa1693411","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f178a6/auth-test-model-f178a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"335b3c8c-8735-4a91-aa22-e7faa1693411","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"335b3c8c-8735-4a91-aa22-e7faa1693411","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"335b3c8c-8735-4a91-aa22-e7faa1693411","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"335b3c8c-8735-4a91-aa22-e7faa1693411","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"335b3c8c-8735-4a91-aa22-e7faa1693411","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0bb70e8-ba78-44bb-8544-8bcf20ec3352","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:52216","PortSpecifier":{"PortValue":52216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f0bb70e8-ba78-44bb-8544-8bcf20ec3352","method":"GET","path":"/maas-api/v1/api-keys/ce5c4252-a44c-418c-959d-443e2b0d4458","host":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0bb70e8-ba78-44bb-8544-8bcf20ec3352","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:52216","PortSpecifier":{"PortValue":52216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783758113,"nanos":541172062},"http":{"id":"f0bb70e8-ba78-44bb-8544-8bcf20ec3352","method":"GET","headers":{":authority":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ce5c4252-a44c-418c-959d-443e2b0d4458",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f0bb70e8-ba78-44bb-8544-8bcf20ec3352","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f0bb70e8-ba78-44bb-8544-8bcf20ec3352","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"]}} {"level":"debug","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f0bb70e8-ba78-44bb-8544-8bcf20ec3352","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"06d1b5d9d009d5f26f906ed7698c8f7a0c3d74c322eab01f6b334398272b088a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ce5c4252-a44c-418c-959d-443e2b0d4458",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0bb70e8-ba78-44bb-8544-8bcf20ec3352","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0bb70e8-ba78-44bb-8544-8bcf20ec3352","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0bb70e8-ba78-44bb-8544-8bcf20ec3352","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-12fff0/auth-test-model-12fff0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f0bb70e8-ba78-44bb-8544-8bcf20ec3352","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0bb70e8-ba78-44bb-8544-8bcf20ec3352","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0bb70e8-ba78-44bb-8544-8bcf20ec3352","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0bb70e8-ba78-44bb-8544-8bcf20ec3352","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-11T08:21:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0bb70e8-ba78-44bb-8544-8bcf20ec3352","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-11T08:22:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5111b694-d3e5-49b7-862e-9e25483d9925","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:59186","PortSpecifier":{"PortValue":59186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5111b694-d3e5-49b7-862e-9e25483d9925","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-11T08:22:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5111b694-d3e5-49b7-862e-9e25483d9925","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:59186","PortSpecifier":{"PortValue":59186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783758130,"nanos":600908114},"http":{"id":"5111b694-d3e5-49b7-862e-9e25483d9925","method":"POST","headers":{":authority":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:22:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5111b694-d3e5-49b7-862e-9e25483d9925","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-11T08:22:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5111b694-d3e5-49b7-862e-9e25483d9925","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"]}} {"level":"debug","ts":"2026-07-11T08:22:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5111b694-d3e5-49b7-862e-9e25483d9925","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:22:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5111b694-d3e5-49b7-862e-9e25483d9925","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:22:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5111b694-d3e5-49b7-862e-9e25483d9925","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:22:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5111b694-d3e5-49b7-862e-9e25483d9925","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f178a6/auth-test-model-f178a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:22:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5111b694-d3e5-49b7-862e-9e25483d9925","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-11T08:22:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5111b694-d3e5-49b7-862e-9e25483d9925","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-11T08:22:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5111b694-d3e5-49b7-862e-9e25483d9925","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-11T08:22:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5111b694-d3e5-49b7-862e-9e25483d9925","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-11T08:22:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5111b694-d3e5-49b7-862e-9e25483d9925","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-11T08:22:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07cfaad8-b63f-4a91-9501-e6214f59a463","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:34700","PortSpecifier":{"PortValue":34700}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"07cfaad8-b63f-4a91-9501-e6214f59a463","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-11T08:22:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07cfaad8-b63f-4a91-9501-e6214f59a463","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:34700","PortSpecifier":{"PortValue":34700}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783758130,"nanos":636336158},"http":{"id":"07cfaad8-b63f-4a91-9501-e6214f59a463","method":"POST","headers":{":authority":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:22:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"07cfaad8-b63f-4a91-9501-e6214f59a463","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-11T08:22:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"07cfaad8-b63f-4a91-9501-e6214f59a463","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"]}} {"level":"debug","ts":"2026-07-11T08:22:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"07cfaad8-b63f-4a91-9501-e6214f59a463","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"06d1b5d9d009d5f26f906ed7698c8f7a0c3d74c322eab01f6b334398272b088a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:22:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07cfaad8-b63f-4a91-9501-e6214f59a463","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:22:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07cfaad8-b63f-4a91-9501-e6214f59a463","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:22:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07cfaad8-b63f-4a91-9501-e6214f59a463","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-12fff0/auth-test-model-12fff0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:22:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"07cfaad8-b63f-4a91-9501-e6214f59a463","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-11T08:22:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07cfaad8-b63f-4a91-9501-e6214f59a463","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-11T08:22:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07cfaad8-b63f-4a91-9501-e6214f59a463","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-11T08:22:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07cfaad8-b63f-4a91-9501-e6214f59a463","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-11T08:22:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07cfaad8-b63f-4a91-9501-e6214f59a463","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-11T08:22:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9d55ad20-67d9-4fd5-b174-af417b6fff9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:59198","PortSpecifier":{"PortValue":59198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9d55ad20-67d9-4fd5-b174-af417b6fff9e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-11T08:22:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9d55ad20-67d9-4fd5-b174-af417b6fff9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:59198","PortSpecifier":{"PortValue":59198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783758130,"nanos":675663083},"http":{"id":"9d55ad20-67d9-4fd5-b174-af417b6fff9e","method":"GET","headers":{":authority":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:22:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9d55ad20-67d9-4fd5-b174-af417b6fff9e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Tv1Pzuu5cchppAhu_hdXaJcMfHMkG7S68p6btN9x0xO0jTus97jABdhwdSgY"} {"level":"debug","ts":"2026-07-11T08:22:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9d55ad20-67d9-4fd5-b174-af417b6fff9e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f178a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Tv1Pzuu5cchppAhu_hdXaJcMfHMkG7S68p6btN9x0xO0jTus97jABdhwdSgY\"}"} {"level":"debug","ts":"2026-07-11T08:22:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9d55ad20-67d9-4fd5-b174-af417b6fff9e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f178a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"16a58dfa-8582-4da8-a4a9-429ab11fcae4","keyName":"e2e-auth-iso-a-1d5b71","subscription":"e2e-auth-iso-8f6f83","tenant":"e2e-shared-a-f178a6","userId":"16a58dfa-8582-4da8-a4a9-429ab11fcae4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-11T08:22:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9d55ad20-67d9-4fd5-b174-af417b6fff9e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:22:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d55ad20-67d9-4fd5-b174-af417b6fff9e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:22:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d55ad20-67d9-4fd5-b174-af417b6fff9e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:22:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d55ad20-67d9-4fd5-b174-af417b6fff9e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f178a6/auth-test-model-f178a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:22:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d55ad20-67d9-4fd5-b174-af417b6fff9e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-11T08:22:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9d55ad20-67d9-4fd5-b174-af417b6fff9e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-11T08:22:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d55ad20-67d9-4fd5-b174-af417b6fff9e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-8f6f83"} {"level":"debug","ts":"2026-07-11T08:22:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d55ad20-67d9-4fd5-b174-af417b6fff9e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-11T08:22:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9d55ad20-67d9-4fd5-b174-af417b6fff9e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-11T08:22:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9d55ad20-67d9-4fd5-b174-af417b6fff9e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-11T08:22:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45b3a985-9722-488a-8027-a70c1d936213","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:43554","PortSpecifier":{"PortValue":43554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"45b3a985-9722-488a-8027-a70c1d936213","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-11T08:22:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45b3a985-9722-488a-8027-a70c1d936213","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:43554","PortSpecifier":{"PortValue":43554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783758145,"nanos":678680232},"http":{"id":"45b3a985-9722-488a-8027-a70c1d936213","method":"POST","headers":{":authority":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:22:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"45b3a985-9722-488a-8027-a70c1d936213","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-11T08:22:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"45b3a985-9722-488a-8027-a70c1d936213","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"]}} {"level":"debug","ts":"2026-07-11T08:22:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"45b3a985-9722-488a-8027-a70c1d936213","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:22:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45b3a985-9722-488a-8027-a70c1d936213","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:22:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45b3a985-9722-488a-8027-a70c1d936213","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:22:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45b3a985-9722-488a-8027-a70c1d936213","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f178a6/auth-test-model-f178a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:22:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"45b3a985-9722-488a-8027-a70c1d936213","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-11T08:22:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45b3a985-9722-488a-8027-a70c1d936213","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-11T08:22:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45b3a985-9722-488a-8027-a70c1d936213","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-11T08:22:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45b3a985-9722-488a-8027-a70c1d936213","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-11T08:22:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45b3a985-9722-488a-8027-a70c1d936213","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-11T08:22:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a3c83329-1e41-4940-b987-3e356375531e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:55722","PortSpecifier":{"PortValue":55722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a3c83329-1e41-4940-b987-3e356375531e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-11T08:22:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a3c83329-1e41-4940-b987-3e356375531e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:55722","PortSpecifier":{"PortValue":55722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783758145,"nanos":712658023},"http":{"id":"a3c83329-1e41-4940-b987-3e356375531e","method":"POST","headers":{":authority":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:22:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a3c83329-1e41-4940-b987-3e356375531e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-11T08:22:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a3c83329-1e41-4940-b987-3e356375531e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"]}} {"level":"debug","ts":"2026-07-11T08:22:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a3c83329-1e41-4940-b987-3e356375531e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"06d1b5d9d009d5f26f906ed7698c8f7a0c3d74c322eab01f6b334398272b088a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:22:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3c83329-1e41-4940-b987-3e356375531e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:22:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3c83329-1e41-4940-b987-3e356375531e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:22:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3c83329-1e41-4940-b987-3e356375531e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-12fff0/auth-test-model-12fff0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:22:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a3c83329-1e41-4940-b987-3e356375531e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-11T08:22:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3c83329-1e41-4940-b987-3e356375531e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-11T08:22:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3c83329-1e41-4940-b987-3e356375531e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-11T08:22:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a3c83329-1e41-4940-b987-3e356375531e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-11T08:22:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a3c83329-1e41-4940-b987-3e356375531e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-11T08:22:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a04cb585-e22a-4c52-9cd3-d7e1b3a98532","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:55726","PortSpecifier":{"PortValue":55726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a04cb585-e22a-4c52-9cd3-d7e1b3a98532","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-11T08:22:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a04cb585-e22a-4c52-9cd3-d7e1b3a98532","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:55726","PortSpecifier":{"PortValue":55726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783758145,"nanos":756393301},"http":{"id":"a04cb585-e22a-4c52-9cd3-d7e1b3a98532","method":"GET","headers":{":authority":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:22:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a04cb585-e22a-4c52-9cd3-d7e1b3a98532","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-nDpYmo4cFEJVtsUy_Y1j0VwaySlUzV1sKYuSZBRXWReTr6L6dlWZXxJ2yShf"} {"level":"debug","ts":"2026-07-11T08:22:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a04cb585-e22a-4c52-9cd3-d7e1b3a98532","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-12fff0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-nDpYmo4cFEJVtsUy_Y1j0VwaySlUzV1sKYuSZBRXWReTr6L6dlWZXxJ2yShf\"}"} {"level":"debug","ts":"2026-07-11T08:22:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a04cb585-e22a-4c52-9cd3-d7e1b3a98532","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-12fff0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-11T08:22:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a04cb585-e22a-4c52-9cd3-d7e1b3a98532","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"06d1b5d9d009d5f26f906ed7698c8f7a0c3d74c322eab01f6b334398272b088a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:22:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a04cb585-e22a-4c52-9cd3-d7e1b3a98532","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:22:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"a04cb585-e22a-4c52-9cd3-d7e1b3a98532","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-11T08:22:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a04cb585-e22a-4c52-9cd3-d7e1b3a98532","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-11T08:22:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a04cb585-e22a-4c52-9cd3-d7e1b3a98532","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"256aee39-0eed-42a6-8dfa-848cc3234714","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:49134","PortSpecifier":{"PortValue":49134}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"256aee39-0eed-42a6-8dfa-848cc3234714","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"256aee39-0eed-42a6-8dfa-848cc3234714","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:49134","PortSpecifier":{"PortValue":49134}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783758162,"nanos":772185517},"http":{"id":"256aee39-0eed-42a6-8dfa-848cc3234714","method":"POST","headers":{":authority":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"256aee39-0eed-42a6-8dfa-848cc3234714","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"256aee39-0eed-42a6-8dfa-848cc3234714","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"]}} {"level":"debug","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"256aee39-0eed-42a6-8dfa-848cc3234714","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"256aee39-0eed-42a6-8dfa-848cc3234714","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"256aee39-0eed-42a6-8dfa-848cc3234714","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"256aee39-0eed-42a6-8dfa-848cc3234714","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f178a6/auth-test-model-f178a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"256aee39-0eed-42a6-8dfa-848cc3234714","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"256aee39-0eed-42a6-8dfa-848cc3234714","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"256aee39-0eed-42a6-8dfa-848cc3234714","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"256aee39-0eed-42a6-8dfa-848cc3234714","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"256aee39-0eed-42a6-8dfa-848cc3234714","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f87fee6-a74a-42bc-8e6d-7ec4db7fefde","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:36992","PortSpecifier":{"PortValue":36992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5f87fee6-a74a-42bc-8e6d-7ec4db7fefde","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f87fee6-a74a-42bc-8e6d-7ec4db7fefde","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:36992","PortSpecifier":{"PortValue":36992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783758162,"nanos":806087937},"http":{"id":"5f87fee6-a74a-42bc-8e6d-7ec4db7fefde","method":"POST","headers":{":authority":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5f87fee6-a74a-42bc-8e6d-7ec4db7fefde","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5f87fee6-a74a-42bc-8e6d-7ec4db7fefde","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"]}} {"level":"debug","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5f87fee6-a74a-42bc-8e6d-7ec4db7fefde","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"06d1b5d9d009d5f26f906ed7698c8f7a0c3d74c322eab01f6b334398272b088a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f87fee6-a74a-42bc-8e6d-7ec4db7fefde","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f87fee6-a74a-42bc-8e6d-7ec4db7fefde","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f87fee6-a74a-42bc-8e6d-7ec4db7fefde","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-12fff0/auth-test-model-12fff0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5f87fee6-a74a-42bc-8e6d-7ec4db7fefde","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f87fee6-a74a-42bc-8e6d-7ec4db7fefde","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f87fee6-a74a-42bc-8e6d-7ec4db7fefde","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f87fee6-a74a-42bc-8e6d-7ec4db7fefde","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f87fee6-a74a-42bc-8e6d-7ec4db7fefde","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85b6b882-52b6-4085-b403-13f3585fe02e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:49138","PortSpecifier":{"PortValue":49138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"85b6b882-52b6-4085-b403-13f3585fe02e","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85b6b882-52b6-4085-b403-13f3585fe02e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:49138","PortSpecifier":{"PortValue":49138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783758162,"nanos":841941856},"http":{"id":"85b6b882-52b6-4085-b403-13f3585fe02e","method":"POST","headers":{":authority":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"85b6b882-52b6-4085-b403-13f3585fe02e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"85b6b882-52b6-4085-b403-13f3585fe02e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"]}} {"level":"debug","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"85b6b882-52b6-4085-b403-13f3585fe02e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85b6b882-52b6-4085-b403-13f3585fe02e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85b6b882-52b6-4085-b403-13f3585fe02e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85b6b882-52b6-4085-b403-13f3585fe02e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f178a6/auth-test-model-f178a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"85b6b882-52b6-4085-b403-13f3585fe02e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85b6b882-52b6-4085-b403-13f3585fe02e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85b6b882-52b6-4085-b403-13f3585fe02e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85b6b882-52b6-4085-b403-13f3585fe02e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85b6b882-52b6-4085-b403-13f3585fe02e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4c7bf11-adf2-42d0-b3ab-a992942179b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:37004","PortSpecifier":{"PortValue":37004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a4c7bf11-adf2-42d0-b3ab-a992942179b4","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4c7bf11-adf2-42d0-b3ab-a992942179b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:37004","PortSpecifier":{"PortValue":37004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783758162,"nanos":873492192},"http":{"id":"a4c7bf11-adf2-42d0-b3ab-a992942179b4","method":"POST","headers":{":authority":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a4c7bf11-adf2-42d0-b3ab-a992942179b4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a4c7bf11-adf2-42d0-b3ab-a992942179b4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"]}} {"level":"debug","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a4c7bf11-adf2-42d0-b3ab-a992942179b4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"06d1b5d9d009d5f26f906ed7698c8f7a0c3d74c322eab01f6b334398272b088a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4c7bf11-adf2-42d0-b3ab-a992942179b4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4c7bf11-adf2-42d0-b3ab-a992942179b4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4c7bf11-adf2-42d0-b3ab-a992942179b4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-12fff0/auth-test-model-12fff0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a4c7bf11-adf2-42d0-b3ab-a992942179b4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4c7bf11-adf2-42d0-b3ab-a992942179b4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4c7bf11-adf2-42d0-b3ab-a992942179b4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4c7bf11-adf2-42d0-b3ab-a992942179b4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-11T08:22:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4c7bf11-adf2-42d0-b3ab-a992942179b4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-11T08:22:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98cd27f9-7bdd-443e-9300-5c7d6a789e5d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:37992","PortSpecifier":{"PortValue":37992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"98cd27f9-7bdd-443e-9300-5c7d6a789e5d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-11T08:22:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98cd27f9-7bdd-443e-9300-5c7d6a789e5d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:37992","PortSpecifier":{"PortValue":37992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783758179,"nanos":936700772},"http":{"id":"98cd27f9-7bdd-443e-9300-5c7d6a789e5d","method":"POST","headers":{":authority":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:22:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"98cd27f9-7bdd-443e-9300-5c7d6a789e5d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-11T08:22:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"98cd27f9-7bdd-443e-9300-5c7d6a789e5d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"]}} {"level":"debug","ts":"2026-07-11T08:22:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"98cd27f9-7bdd-443e-9300-5c7d6a789e5d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:22:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98cd27f9-7bdd-443e-9300-5c7d6a789e5d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:22:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98cd27f9-7bdd-443e-9300-5c7d6a789e5d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:22:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98cd27f9-7bdd-443e-9300-5c7d6a789e5d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f178a6/auth-test-model-f178a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:22:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"98cd27f9-7bdd-443e-9300-5c7d6a789e5d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-11T08:22:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98cd27f9-7bdd-443e-9300-5c7d6a789e5d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-11T08:22:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98cd27f9-7bdd-443e-9300-5c7d6a789e5d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-11T08:22:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98cd27f9-7bdd-443e-9300-5c7d6a789e5d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-11T08:22:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98cd27f9-7bdd-443e-9300-5c7d6a789e5d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-11T08:22:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28cb0ba1-8f90-4bd2-81ee-bb4ca1a7855f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:60926","PortSpecifier":{"PortValue":60926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"28cb0ba1-8f90-4bd2-81ee-bb4ca1a7855f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-11T08:22:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28cb0ba1-8f90-4bd2-81ee-bb4ca1a7855f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:60926","PortSpecifier":{"PortValue":60926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783758179,"nanos":970660921},"http":{"id":"28cb0ba1-8f90-4bd2-81ee-bb4ca1a7855f","method":"POST","headers":{":authority":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:22:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"28cb0ba1-8f90-4bd2-81ee-bb4ca1a7855f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-11T08:22:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"28cb0ba1-8f90-4bd2-81ee-bb4ca1a7855f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"]}} {"level":"debug","ts":"2026-07-11T08:22:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"28cb0ba1-8f90-4bd2-81ee-bb4ca1a7855f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"06d1b5d9d009d5f26f906ed7698c8f7a0c3d74c322eab01f6b334398272b088a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:22:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28cb0ba1-8f90-4bd2-81ee-bb4ca1a7855f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:22:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28cb0ba1-8f90-4bd2-81ee-bb4ca1a7855f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:22:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28cb0ba1-8f90-4bd2-81ee-bb4ca1a7855f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-12fff0/auth-test-model-12fff0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:22:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"28cb0ba1-8f90-4bd2-81ee-bb4ca1a7855f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-11T08:22:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28cb0ba1-8f90-4bd2-81ee-bb4ca1a7855f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-11T08:22:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28cb0ba1-8f90-4bd2-81ee-bb4ca1a7855f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-11T08:22:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28cb0ba1-8f90-4bd2-81ee-bb4ca1a7855f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-11T08:22:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28cb0ba1-8f90-4bd2-81ee-bb4ca1a7855f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-11T08:23:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1ea84c0-89ce-4e29-afdf-3ae28f2ee07a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:60936","PortSpecifier":{"PortValue":60936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1ea84c0-89ce-4e29-afdf-3ae28f2ee07a","method":"GET","path":"/maas-api/v1/api-keys/ba5f6783-fdbc-40bf-a4dd-a542a7de4ec1","host":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-11T08:23:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1ea84c0-89ce-4e29-afdf-3ae28f2ee07a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:60936","PortSpecifier":{"PortValue":60936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783758180,"nanos":37034679},"http":{"id":"c1ea84c0-89ce-4e29-afdf-3ae28f2ee07a","method":"GET","headers":{":authority":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ba5f6783-fdbc-40bf-a4dd-a542a7de4ec1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:23:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c1ea84c0-89ce-4e29-afdf-3ae28f2ee07a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-11T08:23:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1ea84c0-89ce-4e29-afdf-3ae28f2ee07a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"]}} {"level":"debug","ts":"2026-07-11T08:23:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1ea84c0-89ce-4e29-afdf-3ae28f2ee07a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"06d1b5d9d009d5f26f906ed7698c8f7a0c3d74c322eab01f6b334398272b088a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ba5f6783-fdbc-40bf-a4dd-a542a7de4ec1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:23:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1ea84c0-89ce-4e29-afdf-3ae28f2ee07a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:23:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1ea84c0-89ce-4e29-afdf-3ae28f2ee07a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:23:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1ea84c0-89ce-4e29-afdf-3ae28f2ee07a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-12fff0/auth-test-model-12fff0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:23:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c1ea84c0-89ce-4e29-afdf-3ae28f2ee07a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-11T08:23:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1ea84c0-89ce-4e29-afdf-3ae28f2ee07a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-11T08:23:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1ea84c0-89ce-4e29-afdf-3ae28f2ee07a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-11T08:23:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1ea84c0-89ce-4e29-afdf-3ae28f2ee07a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-11T08:23:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1ea84c0-89ce-4e29-afdf-3ae28f2ee07a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-11T08:23:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce67bddd-6cec-47df-9d39-89c28a018e97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:37994","PortSpecifier":{"PortValue":37994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ce67bddd-6cec-47df-9d39-89c28a018e97","method":"GET","path":"/maas-api/v1/api-keys/ba5f6783-fdbc-40bf-a4dd-a542a7de4ec1","host":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-11T08:23:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce67bddd-6cec-47df-9d39-89c28a018e97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:37994","PortSpecifier":{"PortValue":37994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783758180,"nanos":76494168},"http":{"id":"ce67bddd-6cec-47df-9d39-89c28a018e97","method":"GET","headers":{":authority":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ba5f6783-fdbc-40bf-a4dd-a542a7de4ec1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:23:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ce67bddd-6cec-47df-9d39-89c28a018e97","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-11T08:23:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ce67bddd-6cec-47df-9d39-89c28a018e97","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"]}} {"level":"debug","ts":"2026-07-11T08:23:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ce67bddd-6cec-47df-9d39-89c28a018e97","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ba5f6783-fdbc-40bf-a4dd-a542a7de4ec1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:23:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce67bddd-6cec-47df-9d39-89c28a018e97","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:23:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce67bddd-6cec-47df-9d39-89c28a018e97","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:23:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce67bddd-6cec-47df-9d39-89c28a018e97","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f178a6/auth-test-model-f178a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:23:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ce67bddd-6cec-47df-9d39-89c28a018e97","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-11T08:23:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce67bddd-6cec-47df-9d39-89c28a018e97","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-11T08:23:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce67bddd-6cec-47df-9d39-89c28a018e97","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-11T08:23:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce67bddd-6cec-47df-9d39-89c28a018e97","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-11T08:23:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce67bddd-6cec-47df-9d39-89c28a018e97","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-11T08:23:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"14b77b1c-e71d-4a3b-baa2-3479607f1724","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:57596","PortSpecifier":{"PortValue":57596}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"14b77b1c-e71d-4a3b-baa2-3479607f1724","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-11T08:23:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"14b77b1c-e71d-4a3b-baa2-3479607f1724","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:57596","PortSpecifier":{"PortValue":57596}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783758197,"nanos":93127481},"http":{"id":"14b77b1c-e71d-4a3b-baa2-3479607f1724","method":"POST","headers":{":authority":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:23:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"14b77b1c-e71d-4a3b-baa2-3479607f1724","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-11T08:23:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"14b77b1c-e71d-4a3b-baa2-3479607f1724","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"]}} {"level":"debug","ts":"2026-07-11T08:23:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"14b77b1c-e71d-4a3b-baa2-3479607f1724","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:23:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14b77b1c-e71d-4a3b-baa2-3479607f1724","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:23:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14b77b1c-e71d-4a3b-baa2-3479607f1724","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:23:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14b77b1c-e71d-4a3b-baa2-3479607f1724","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f178a6/auth-test-model-f178a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:23:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"14b77b1c-e71d-4a3b-baa2-3479607f1724","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-11T08:23:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14b77b1c-e71d-4a3b-baa2-3479607f1724","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-11T08:23:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14b77b1c-e71d-4a3b-baa2-3479607f1724","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-11T08:23:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"14b77b1c-e71d-4a3b-baa2-3479607f1724","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-11T08:23:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"14b77b1c-e71d-4a3b-baa2-3479607f1724","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-11T08:23:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2abc0d63-41ac-456a-a35a-e397736804aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:33298","PortSpecifier":{"PortValue":33298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2abc0d63-41ac-456a-a35a-e397736804aa","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-11T08:23:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2abc0d63-41ac-456a-a35a-e397736804aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:33298","PortSpecifier":{"PortValue":33298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783758197,"nanos":126676883},"http":{"id":"2abc0d63-41ac-456a-a35a-e397736804aa","method":"POST","headers":{":authority":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:23:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2abc0d63-41ac-456a-a35a-e397736804aa","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-11T08:23:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2abc0d63-41ac-456a-a35a-e397736804aa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"]}} {"level":"debug","ts":"2026-07-11T08:23:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2abc0d63-41ac-456a-a35a-e397736804aa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"06d1b5d9d009d5f26f906ed7698c8f7a0c3d74c322eab01f6b334398272b088a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:23:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2abc0d63-41ac-456a-a35a-e397736804aa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:23:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2abc0d63-41ac-456a-a35a-e397736804aa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:23:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2abc0d63-41ac-456a-a35a-e397736804aa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-12fff0/auth-test-model-12fff0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:23:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2abc0d63-41ac-456a-a35a-e397736804aa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-11T08:23:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2abc0d63-41ac-456a-a35a-e397736804aa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-11T08:23:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2abc0d63-41ac-456a-a35a-e397736804aa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-11T08:23:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2abc0d63-41ac-456a-a35a-e397736804aa","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-11T08:23:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2abc0d63-41ac-456a-a35a-e397736804aa","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-11T08:23:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78ed954c-5c29-4abc-ba6b-8273e31432a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:57602","PortSpecifier":{"PortValue":57602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"78ed954c-5c29-4abc-ba6b-8273e31432a7","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-11T08:23:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78ed954c-5c29-4abc-ba6b-8273e31432a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:57602","PortSpecifier":{"PortValue":57602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783758197,"nanos":157004571},"http":{"id":"78ed954c-5c29-4abc-ba6b-8273e31432a7","method":"POST","headers":{":authority":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:23:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"78ed954c-5c29-4abc-ba6b-8273e31432a7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1VzRy0H4uVIs9i8FB_QL6Tp2ctXmevuXR1lZJZcopldarssgLG0JCgGJgJ7Cx"} {"level":"debug","ts":"2026-07-11T08:23:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"78ed954c-5c29-4abc-ba6b-8273e31432a7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f178a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1VzRy0H4uVIs9i8FB_QL6Tp2ctXmevuXR1lZJZcopldarssgLG0JCgGJgJ7Cx\"}"} {"level":"debug","ts":"2026-07-11T08:23:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"78ed954c-5c29-4abc-ba6b-8273e31432a7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f178a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"83110f86-59f1-43f5-a4a6-1d830a52da39","keyName":"e2e-auth-iso-a-aab7f7","subscription":"e2e-auth-iso-ac912c","tenant":"e2e-shared-a-f178a6","userId":"83110f86-59f1-43f5-a4a6-1d830a52da39","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-11T08:23:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"78ed954c-5c29-4abc-ba6b-8273e31432a7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:23:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78ed954c-5c29-4abc-ba6b-8273e31432a7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:23:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78ed954c-5c29-4abc-ba6b-8273e31432a7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:23:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78ed954c-5c29-4abc-ba6b-8273e31432a7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f178a6/auth-test-model-f178a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:23:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78ed954c-5c29-4abc-ba6b-8273e31432a7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-11T08:23:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"78ed954c-5c29-4abc-ba6b-8273e31432a7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-11T08:23:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78ed954c-5c29-4abc-ba6b-8273e31432a7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-ac912c"} {"level":"debug","ts":"2026-07-11T08:23:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78ed954c-5c29-4abc-ba6b-8273e31432a7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-11T08:23:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78ed954c-5c29-4abc-ba6b-8273e31432a7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-11T08:23:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78ed954c-5c29-4abc-ba6b-8273e31432a7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-11T08:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ce85d8dd693161ed0285529984651cccc1c2361ccacd85e0438c4615fa5b830"} {"level":"info","ts":"2026-07-11T08:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2b542b9f4ab6508e460a2b03b9cdc150959f496cf96da98707ad3d13dbe3642"} {"level":"info","ts":"2026-07-11T08:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6db6b29718073e245ba25fa3aca1285ab8534cae1ff1c125d8384a7a277a7331"} {"level":"info","ts":"2026-07-11T08:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/32aa78506e2c392742358e454be340e66f5eb7b98c51a0c96c5901f7ce9c91ae"} {"level":"info","ts":"2026-07-11T08:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56a4ea2af2afeab55efe74db818156bc722dd158fefc3c33a590fa1e7da48293"} {"level":"info","ts":"2026-07-11T08:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85528ad53bca92744f5b81b254f121dc2bf3a044108c7c46b8d7f88a9261e697"} {"level":"info","ts":"2026-07-11T08:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dffd97a8fae9d9e970a07b6079a1ffd3c15e0e46e46db4573b9445591390d387"} {"level":"info","ts":"2026-07-11T08:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5814f183426399de685a6436dbf8fc090572653ecab4456ce60d261769ac84cb"} {"level":"info","ts":"2026-07-11T08:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/457941a84d894e540cb0c890659b81b6c09e8dba28b5d30d7f2ed0327dde315d"} {"level":"info","ts":"2026-07-11T08:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c4b9de23ec0e1424638a47368ff2740bdc1bf24f0a906ce9e87b8e083df8ac9"} {"level":"info","ts":"2026-07-11T08:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9dfafc3fefb7fb9f281c6f95903d40378c740cbab954b37ea002490b9b969aab"} {"level":"info","ts":"2026-07-11T08:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98c77c2aba54dd989bfdcc6ea7ff7e94844e084ce0dc2cf93c8b6785225d8e41"} {"level":"info","ts":"2026-07-11T08:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/331ba591023facc0632c94fd19b996e0daaefcb24f0949550ffe4ae0ea763e81"} {"level":"info","ts":"2026-07-11T08:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e60995411260d4beeaeaf7fd4140eca702a9c8169d9a67e3e6181675f9e5c5de"} {"level":"info","ts":"2026-07-11T08:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/237b1fd00f08e4ee9f3f8033b92a9ff6c50908c804f0f2d17d6e0c870fdecf90"} {"level":"info","ts":"2026-07-11T08:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb7bc3f55a867d51062c6cc407bd185b2961b0bcd9002ac6b91fc2c491a42d6c"} {"level":"debug","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f185c2fb72ffc52c0cb4a69a5e07a5e0e356b65063f90880047ce9c6a647a43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f185c2fb72ffc52c0cb4a69a5e07a5e0e356b65063f90880047ce9c6a647a43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f185c2fb72ffc52c0cb4a69a5e07a5e0e356b65063f90880047ce9c6a647a43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f185c2fb72ffc52c0cb4a69a5e07a5e0e356b65063f90880047ce9c6a647a43","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f185c2fb72ffc52c0cb4a69a5e07a5e0e356b65063f90880047ce9c6a647a43"} {"level":"debug","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f185c2fb72ffc52c0cb4a69a5e07a5e0e356b65063f90880047ce9c6a647a43","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f185c2fb72ffc52c0cb4a69a5e07a5e0e356b65063f90880047ce9c6a647a43"} {"level":"debug","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f185c2fb72ffc52c0cb4a69a5e07a5e0e356b65063f90880047ce9c6a647a43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:23:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:23:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f185c2fb72ffc52c0cb4a69a5e07a5e0e356b65063f90880047ce9c6a647a43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f185c2fb72ffc52c0cb4a69a5e07a5e0e356b65063f90880047ce9c6a647a43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f185c2fb72ffc52c0cb4a69a5e07a5e0e356b65063f90880047ce9c6a647a43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f185c2fb72ffc52c0cb4a69a5e07a5e0e356b65063f90880047ce9c6a647a43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b4ee544c17a84020b8116f9c039de413b5df0c11a5ca6c16ce60abd018436bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b4ee544c17a84020b8116f9c039de413b5df0c11a5ca6c16ce60abd018436bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f185c2fb72ffc52c0cb4a69a5e07a5e0e356b65063f90880047ce9c6a647a43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b4ee544c17a84020b8116f9c039de413b5df0c11a5ca6c16ce60abd018436bd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f185c2fb72ffc52c0cb4a69a5e07a5e0e356b65063f90880047ce9c6a647a43"} {"level":"debug","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b4ee544c17a84020b8116f9c039de413b5df0c11a5ca6c16ce60abd018436bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b4ee544c17a84020b8116f9c039de413b5df0c11a5ca6c16ce60abd018436bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f185c2fb72ffc52c0cb4a69a5e07a5e0e356b65063f90880047ce9c6a647a43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:23:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:23:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f185c2fb72ffc52c0cb4a69a5e07a5e0e356b65063f90880047ce9c6a647a43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f185c2fb72ffc52c0cb4a69a5e07a5e0e356b65063f90880047ce9c6a647a43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b4ee544c17a84020b8116f9c039de413b5df0c11a5ca6c16ce60abd018436bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f185c2fb72ffc52c0cb4a69a5e07a5e0e356b65063f90880047ce9c6a647a43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b4ee544c17a84020b8116f9c039de413b5df0c11a5ca6c16ce60abd018436bd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b4ee544c17a84020b8116f9c039de413b5df0c11a5ca6c16ce60abd018436bd"} {"level":"info","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f185c2fb72ffc52c0cb4a69a5e07a5e0e356b65063f90880047ce9c6a647a43"} {"level":"info","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b4ee544c17a84020b8116f9c039de413b5df0c11a5ca6c16ce60abd018436bd"} {"level":"debug","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b4ee544c17a84020b8116f9c039de413b5df0c11a5ca6c16ce60abd018436bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:23:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:23:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b4ee544c17a84020b8116f9c039de413b5df0c11a5ca6c16ce60abd018436bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b4ee544c17a84020b8116f9c039de413b5df0c11a5ca6c16ce60abd018436bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b4ee544c17a84020b8116f9c039de413b5df0c11a5ca6c16ce60abd018436bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b4ee544c17a84020b8116f9c039de413b5df0c11a5ca6c16ce60abd018436bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b4ee544c17a84020b8116f9c039de413b5df0c11a5ca6c16ce60abd018436bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b4ee544c17a84020b8116f9c039de413b5df0c11a5ca6c16ce60abd018436bd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b4ee544c17a84020b8116f9c039de413b5df0c11a5ca6c16ce60abd018436bd"} {"level":"debug","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb1bde00ffc09731dc2cf0c0eff36d47f4e057460d8c8e870f2593c847e2e744","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb1bde00ffc09731dc2cf0c0eff36d47f4e057460d8c8e870f2593c847e2e744","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb1bde00ffc09731dc2cf0c0eff36d47f4e057460d8c8e870f2593c847e2e744","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b4ee544c17a84020b8116f9c039de413b5df0c11a5ca6c16ce60abd018436bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:23:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:23:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b4ee544c17a84020b8116f9c039de413b5df0c11a5ca6c16ce60abd018436bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb1bde00ffc09731dc2cf0c0eff36d47f4e057460d8c8e870f2593c847e2e744"} {"level":"info","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b4ee544c17a84020b8116f9c039de413b5df0c11a5ca6c16ce60abd018436bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb1bde00ffc09731dc2cf0c0eff36d47f4e057460d8c8e870f2593c847e2e744","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:23:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:23:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb1bde00ffc09731dc2cf0c0eff36d47f4e057460d8c8e870f2593c847e2e744"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb1bde00ffc09731dc2cf0c0eff36d47f4e057460d8c8e870f2593c847e2e744","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b4ee544c17a84020b8116f9c039de413b5df0c11a5ca6c16ce60abd018436bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b4ee544c17a84020b8116f9c039de413b5df0c11a5ca6c16ce60abd018436bd"} {"level":"info","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b4ee544c17a84020b8116f9c039de413b5df0c11a5ca6c16ce60abd018436bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb1bde00ffc09731dc2cf0c0eff36d47f4e057460d8c8e870f2593c847e2e744","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb1bde00ffc09731dc2cf0c0eff36d47f4e057460d8c8e870f2593c847e2e744"} {"level":"info","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb1bde00ffc09731dc2cf0c0eff36d47f4e057460d8c8e870f2593c847e2e744","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b4ee544c17a84020b8116f9c039de413b5df0c11a5ca6c16ce60abd018436bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb1bde00ffc09731dc2cf0c0eff36d47f4e057460d8c8e870f2593c847e2e744","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:23:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:23:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb1bde00ffc09731dc2cf0c0eff36d47f4e057460d8c8e870f2593c847e2e744"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb1bde00ffc09731dc2cf0c0eff36d47f4e057460d8c8e870f2593c847e2e744","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b4ee544c17a84020b8116f9c039de413b5df0c11a5ca6c16ce60abd018436bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb1bde00ffc09731dc2cf0c0eff36d47f4e057460d8c8e870f2593c847e2e744","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:23:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:23:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb1bde00ffc09731dc2cf0c0eff36d47f4e057460d8c8e870f2593c847e2e744"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fb1bde00ffc09731dc2cf0c0eff36d47f4e057460d8c8e870f2593c847e2e744","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fb1bde00ffc09731dc2cf0c0eff36d47f4e057460d8c8e870f2593c847e2e744\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb1bde00ffc09731dc2cf0c0eff36d47f4e057460d8c8e870f2593c847e2e744","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b4ee544c17a84020b8116f9c039de413b5df0c11a5ca6c16ce60abd018436bd"} {"level":"debug","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb1bde00ffc09731dc2cf0c0eff36d47f4e057460d8c8e870f2593c847e2e744","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb1bde00ffc09731dc2cf0c0eff36d47f4e057460d8c8e870f2593c847e2e744","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9b9941017886c48ad7debad3e823e63ad171a4af156d6812fdcdad52bc9b220","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb1bde00ffc09731dc2cf0c0eff36d47f4e057460d8c8e870f2593c847e2e744"} {"level":"info","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9b9941017886c48ad7debad3e823e63ad171a4af156d6812fdcdad52bc9b220","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b4ee544c17a84020b8116f9c039de413b5df0c11a5ca6c16ce60abd018436bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:23:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:23:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b4ee544c17a84020b8116f9c039de413b5df0c11a5ca6c16ce60abd018436bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b4ee544c17a84020b8116f9c039de413b5df0c11a5ca6c16ce60abd018436bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb1bde00ffc09731dc2cf0c0eff36d47f4e057460d8c8e870f2593c847e2e744","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:23:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:23:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb1bde00ffc09731dc2cf0c0eff36d47f4e057460d8c8e870f2593c847e2e744"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9b9941017886c48ad7debad3e823e63ad171a4af156d6812fdcdad52bc9b220"} {"level":"info","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb1bde00ffc09731dc2cf0c0eff36d47f4e057460d8c8e870f2593c847e2e744","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9b9941017886c48ad7debad3e823e63ad171a4af156d6812fdcdad52bc9b220","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:23:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:23:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9b9941017886c48ad7debad3e823e63ad171a4af156d6812fdcdad52bc9b220"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9b9941017886c48ad7debad3e823e63ad171a4af156d6812fdcdad52bc9b220","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b4ee544c17a84020b8116f9c039de413b5df0c11a5ca6c16ce60abd018436bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb1bde00ffc09731dc2cf0c0eff36d47f4e057460d8c8e870f2593c847e2e744","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb1bde00ffc09731dc2cf0c0eff36d47f4e057460d8c8e870f2593c847e2e744"} {"level":"info","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb1bde00ffc09731dc2cf0c0eff36d47f4e057460d8c8e870f2593c847e2e744","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9b9941017886c48ad7debad3e823e63ad171a4af156d6812fdcdad52bc9b220","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb1bde00ffc09731dc2cf0c0eff36d47f4e057460d8c8e870f2593c847e2e744","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:23:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:23:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb1bde00ffc09731dc2cf0c0eff36d47f4e057460d8c8e870f2593c847e2e744"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b4ee544c17a84020b8116f9c039de413b5df0c11a5ca6c16ce60abd018436bd"} {"level":"info","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb1bde00ffc09731dc2cf0c0eff36d47f4e057460d8c8e870f2593c847e2e744","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb1bde00ffc09731dc2cf0c0eff36d47f4e057460d8c8e870f2593c847e2e744","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:23:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:23:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb1bde00ffc09731dc2cf0c0eff36d47f4e057460d8c8e870f2593c847e2e744"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fb1bde00ffc09731dc2cf0c0eff36d47f4e057460d8c8e870f2593c847e2e744","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fb1bde00ffc09731dc2cf0c0eff36d47f4e057460d8c8e870f2593c847e2e744\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb1bde00ffc09731dc2cf0c0eff36d47f4e057460d8c8e870f2593c847e2e744","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb1bde00ffc09731dc2cf0c0eff36d47f4e057460d8c8e870f2593c847e2e744","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9b9941017886c48ad7debad3e823e63ad171a4af156d6812fdcdad52bc9b220"} {"level":"debug","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb1bde00ffc09731dc2cf0c0eff36d47f4e057460d8c8e870f2593c847e2e744"} {"level":"debug","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5"} {"level":"debug","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5"} {"level":"debug","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76c08ed5a68b394dca6e8aa758ceefdbe3957da354ebf75b704bad8bf680e4e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76c08ed5a68b394dca6e8aa758ceefdbe3957da354ebf75b704bad8bf680e4e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f87d844814a7b92095bc0c18a073ee351470f241bf8b931b4984e9a8cf6effac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76c08ed5a68b394dca6e8aa758ceefdbe3957da354ebf75b704bad8bf680e4e7"} {"level":"info","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f87d844814a7b92095bc0c18a073ee351470f241bf8b931b4984e9a8cf6effac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76c08ed5a68b394dca6e8aa758ceefdbe3957da354ebf75b704bad8bf680e4e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:23:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:23:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76c08ed5a68b394dca6e8aa758ceefdbe3957da354ebf75b704bad8bf680e4e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76c08ed5a68b394dca6e8aa758ceefdbe3957da354ebf75b704bad8bf680e4e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f87d844814a7b92095bc0c18a073ee351470f241bf8b931b4984e9a8cf6effac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f87d844814a7b92095bc0c18a073ee351470f241bf8b931b4984e9a8cf6effac"} {"level":"info","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f87d844814a7b92095bc0c18a073ee351470f241bf8b931b4984e9a8cf6effac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:23:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:23:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76c08ed5a68b394dca6e8aa758ceefdbe3957da354ebf75b704bad8bf680e4e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76c08ed5a68b394dca6e8aa758ceefdbe3957da354ebf75b704bad8bf680e4e7"} {"level":"info","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76c08ed5a68b394dca6e8aa758ceefdbe3957da354ebf75b704bad8bf680e4e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f87d844814a7b92095bc0c18a073ee351470f241bf8b931b4984e9a8cf6effac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76c08ed5a68b394dca6e8aa758ceefdbe3957da354ebf75b704bad8bf680e4e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:23:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:23:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76c08ed5a68b394dca6e8aa758ceefdbe3957da354ebf75b704bad8bf680e4e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f87d844814a7b92095bc0c18a073ee351470f241bf8b931b4984e9a8cf6effac"} {"level":"info","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76c08ed5a68b394dca6e8aa758ceefdbe3957da354ebf75b704bad8bf680e4e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76c08ed5a68b394dca6e8aa758ceefdbe3957da354ebf75b704bad8bf680e4e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:23:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:23:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76c08ed5a68b394dca6e8aa758ceefdbe3957da354ebf75b704bad8bf680e4e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"76c08ed5a68b394dca6e8aa758ceefdbe3957da354ebf75b704bad8bf680e4e7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"76c08ed5a68b394dca6e8aa758ceefdbe3957da354ebf75b704bad8bf680e4e7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fba6c60bf624ff9960c851d786f797cf5fa1c734e07103889edd924348c27b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fba6c60bf624ff9960c851d786f797cf5fa1c734e07103889edd924348c27b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f87d844814a7b92095bc0c18a073ee351470f241bf8b931b4984e9a8cf6effac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:23:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:23:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f87d844814a7b92095bc0c18a073ee351470f241bf8b931b4984e9a8cf6effac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5"} {"level":"info","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f87d844814a7b92095bc0c18a073ee351470f241bf8b931b4984e9a8cf6effac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76c08ed5a68b394dca6e8aa758ceefdbe3957da354ebf75b704bad8bf680e4e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76c08ed5a68b394dca6e8aa758ceefdbe3957da354ebf75b704bad8bf680e4e7"} {"level":"info","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76c08ed5a68b394dca6e8aa758ceefdbe3957da354ebf75b704bad8bf680e4e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fba6c60bf624ff9960c851d786f797cf5fa1c734e07103889edd924348c27b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fba6c60bf624ff9960c851d786f797cf5fa1c734e07103889edd924348c27b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f87d844814a7b92095bc0c18a073ee351470f241bf8b931b4984e9a8cf6effac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76c08ed5a68b394dca6e8aa758ceefdbe3957da354ebf75b704bad8bf680e4e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:23:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:23:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76c08ed5a68b394dca6e8aa758ceefdbe3957da354ebf75b704bad8bf680e4e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fba6c60bf624ff9960c851d786f797cf5fa1c734e07103889edd924348c27b6"} {"level":"info","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76c08ed5a68b394dca6e8aa758ceefdbe3957da354ebf75b704bad8bf680e4e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fba6c60bf624ff9960c851d786f797cf5fa1c734e07103889edd924348c27b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:23:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:23:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fba6c60bf624ff9960c851d786f797cf5fa1c734e07103889edd924348c27b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fba6c60bf624ff9960c851d786f797cf5fa1c734e07103889edd924348c27b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76c08ed5a68b394dca6e8aa758ceefdbe3957da354ebf75b704bad8bf680e4e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fba6c60bf624ff9960c851d786f797cf5fa1c734e07103889edd924348c27b6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f87d844814a7b92095bc0c18a073ee351470f241bf8b931b4984e9a8cf6effac"} {"level":"info","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76c08ed5a68b394dca6e8aa758ceefdbe3957da354ebf75b704bad8bf680e4e7"} {"level":"info","ts":"2026-07-11T08:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fba6c60bf624ff9960c851d786f797cf5fa1c734e07103889edd924348c27b6"} {"level":"debug","ts":"2026-07-11T08:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917"} {"level":"info","ts":"2026-07-11T08:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-11T08:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-11T08:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917"} {"level":"info","ts":"2026-07-11T08:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917"} {"level":"debug","ts":"2026-07-11T08:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:23:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:23:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917"} {"level":"info","ts":"2026-07-11T08:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917"} {"level":"debug","ts":"2026-07-11T08:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:23:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:23:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae8dc0a7545a5a1b1cb131c9e709bcdc3034c2310e83bfe656e90df5956add6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae8dc0a7545a5a1b1cb131c9e709bcdc3034c2310e83bfe656e90df5956add6d"} {"level":"info","ts":"2026-07-11T08:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae8dc0a7545a5a1b1cb131c9e709bcdc3034c2310e83bfe656e90df5956add6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917"} {"level":"info","ts":"2026-07-11T08:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae8dc0a7545a5a1b1cb131c9e709bcdc3034c2310e83bfe656e90df5956add6d"} {"level":"info","ts":"2026-07-11T08:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae8dc0a7545a5a1b1cb131c9e709bcdc3034c2310e83bfe656e90df5956add6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:23:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:23:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae8dc0a7545a5a1b1cb131c9e709bcdc3034c2310e83bfe656e90df5956add6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae8dc0a7545a5a1b1cb131c9e709bcdc3034c2310e83bfe656e90df5956add6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae8dc0a7545a5a1b1cb131c9e709bcdc3034c2310e83bfe656e90df5956add6d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917"} {"level":"debug","ts":"2026-07-11T08:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:23:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:23:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae8dc0a7545a5a1b1cb131c9e709bcdc3034c2310e83bfe656e90df5956add6d"} {"level":"info","ts":"2026-07-11T08:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917"} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0"} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0"} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c06a60d8609feb97912bc54c821b2d6a4bdf6f8ccc1060d01854c5153966a2a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0"} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c06a60d8609feb97912bc54c821b2d6a4bdf6f8ccc1060d01854c5153966a2a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c06a60d8609feb97912bc54c821b2d6a4bdf6f8ccc1060d01854c5153966a2a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c06a60d8609feb97912bc54c821b2d6a4bdf6f8ccc1060d01854c5153966a2a1"} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c06a60d8609feb97912bc54c821b2d6a4bdf6f8ccc1060d01854c5153966a2a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c06a60d8609feb97912bc54c821b2d6a4bdf6f8ccc1060d01854c5153966a2a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c06a60d8609feb97912bc54c821b2d6a4bdf6f8ccc1060d01854c5153966a2a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0"} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c06a60d8609feb97912bc54c821b2d6a4bdf6f8ccc1060d01854c5153966a2a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c06a60d8609feb97912bc54c821b2d6a4bdf6f8ccc1060d01854c5153966a2a1"} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c06a60d8609feb97912bc54c821b2d6a4bdf6f8ccc1060d01854c5153966a2a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0"} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c06a60d8609feb97912bc54c821b2d6a4bdf6f8ccc1060d01854c5153966a2a1"} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0"} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9"} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0"} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9"} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20bb80d0b4d55c4e2bb0639308d000098ea57eff250b115599f9c99dab24fa42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20bb80d0b4d55c4e2bb0639308d000098ea57eff250b115599f9c99dab24fa42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0"} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20bb80d0b4d55c4e2bb0639308d000098ea57eff250b115599f9c99dab24fa42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20bb80d0b4d55c4e2bb0639308d000098ea57eff250b115599f9c99dab24fa42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20bb80d0b4d55c4e2bb0639308d000098ea57eff250b115599f9c99dab24fa42"} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20bb80d0b4d55c4e2bb0639308d000098ea57eff250b115599f9c99dab24fa42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20bb80d0b4d55c4e2bb0639308d000098ea57eff250b115599f9c99dab24fa42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9"} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20bb80d0b4d55c4e2bb0639308d000098ea57eff250b115599f9c99dab24fa42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20bb80d0b4d55c4e2bb0639308d000098ea57eff250b115599f9c99dab24fa42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0"} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcf269eb045b6dd537c5f7182b2c673820c375d5c77e6d0b11f10aa4ead333ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcf269eb045b6dd537c5f7182b2c673820c375d5c77e6d0b11f10aa4ead333ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20bb80d0b4d55c4e2bb0639308d000098ea57eff250b115599f9c99dab24fa42"} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcf269eb045b6dd537c5f7182b2c673820c375d5c77e6d0b11f10aa4ead333ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcf269eb045b6dd537c5f7182b2c673820c375d5c77e6d0b11f10aa4ead333ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0"} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcf269eb045b6dd537c5f7182b2c673820c375d5c77e6d0b11f10aa4ead333ae"} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcf269eb045b6dd537c5f7182b2c673820c375d5c77e6d0b11f10aa4ead333ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fcf269eb045b6dd537c5f7182b2c673820c375d5c77e6d0b11f10aa4ead333ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcf269eb045b6dd537c5f7182b2c673820c375d5c77e6d0b11f10aa4ead333ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0"} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcf269eb045b6dd537c5f7182b2c673820c375d5c77e6d0b11f10aa4ead333ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcf269eb045b6dd537c5f7182b2c673820c375d5c77e6d0b11f10aa4ead333ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcf269eb045b6dd537c5f7182b2c673820c375d5c77e6d0b11f10aa4ead333ae"} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bcfdabdb9f340907949ececf755347aa417e10b21859fed4659209b52bdc2fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bcfdabdb9f340907949ececf755347aa417e10b21859fed4659209b52bdc2fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcf269eb045b6dd537c5f7182b2c673820c375d5c77e6d0b11f10aa4ead333ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fcf269eb045b6dd537c5f7182b2c673820c375d5c77e6d0b11f10aa4ead333ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0"} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcf269eb045b6dd537c5f7182b2c673820c375d5c77e6d0b11f10aa4ead333ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bcfdabdb9f340907949ececf755347aa417e10b21859fed4659209b52bdc2fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bcfdabdb9f340907949ececf755347aa417e10b21859fed4659209b52bdc2fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcf269eb045b6dd537c5f7182b2c673820c375d5c77e6d0b11f10aa4ead333ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bcfdabdb9f340907949ececf755347aa417e10b21859fed4659209b52bdc2fc"} {"level":"debug","ts":"2026-07-11T08:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bcfdabdb9f340907949ececf755347aa417e10b21859fed4659209b52bdc2fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:23:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bcfdabdb9f340907949ececf755347aa417e10b21859fed4659209b52bdc2fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bcfdabdb9f340907949ececf755347aa417e10b21859fed4659209b52bdc2fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bcfdabdb9f340907949ececf755347aa417e10b21859fed4659209b52bdc2fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:23:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:23:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bcfdabdb9f340907949ececf755347aa417e10b21859fed4659209b52bdc2fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-11T08:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1bcfdabdb9f340907949ececf755347aa417e10b21859fed4659209b52bdc2fc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1bcfdabdb9f340907949ececf755347aa417e10b21859fed4659209b52bdc2fc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-11T08:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bcfdabdb9f340907949ececf755347aa417e10b21859fed4659209b52bdc2fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcf269eb045b6dd537c5f7182b2c673820c375d5c77e6d0b11f10aa4ead333ae"} {"level":"debug","ts":"2026-07-11T08:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bcfdabdb9f340907949ececf755347aa417e10b21859fed4659209b52bdc2fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0"} {"level":"info","ts":"2026-07-11T08:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bcfdabdb9f340907949ececf755347aa417e10b21859fed4659209b52bdc2fc"} {"level":"debug","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:24:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:24:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9"} {"level":"debug","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9"} {"level":"debug","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:24:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:24:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:24:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:24:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9"} {"level":"debug","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9"} {"level":"debug","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:24:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:24:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:24:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:24:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcf269eb045b6dd537c5f7182b2c673820c375d5c77e6d0b11f10aa4ead333ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9"} {"level":"debug","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:24:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:24:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcf269eb045b6dd537c5f7182b2c673820c375d5c77e6d0b11f10aa4ead333ae"} {"level":"info","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:24:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:24:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9"} {"level":"info","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9"} {"level":"debug","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9"} {"level":"debug","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:24:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:24:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917"} {"level":"debug","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:24:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:24:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917"} {"level":"info","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9"} {"level":"debug","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:24:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:24:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:24:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:24:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917"} {"level":"debug","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917"} {"level":"debug","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:24:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:24:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:24:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:24:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c06a60d8609feb97912bc54c821b2d6a4bdf6f8ccc1060d01854c5153966a2a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917"} {"level":"debug","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:24:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:24:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38fd9ee1b38b02f47417ef7d0628d20ae6a21769dd8d2e209f479b0cea50d9a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c06a60d8609feb97912bc54c821b2d6a4bdf6f8ccc1060d01854c5153966a2a1"} {"level":"info","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917"} {"level":"info","ts":"2026-07-11T08:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38fd9ee1b38b02f47417ef7d0628d20ae6a21769dd8d2e209f479b0cea50d9a"} {"level":"debug","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:24:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:24:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5"} {"level":"debug","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5"} {"level":"debug","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:24:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:24:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:24:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:24:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5"} {"level":"debug","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5"} {"level":"debug","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:24:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:24:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:24:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:24:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5"} {"level":"debug","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5"} {"level":"debug","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:24:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:24:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:24:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:24:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae8dc0a7545a5a1b1cb131c9e709bcdc3034c2310e83bfe656e90df5956add6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5"} {"level":"debug","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:24:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:24:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae8dc0a7545a5a1b1cb131c9e709bcdc3034c2310e83bfe656e90df5956add6d"} {"level":"info","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:24:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:24:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5"} {"level":"debug","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5"} {"level":"debug","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5"} {"level":"debug","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"853646085dd3ad6f1705cfb7b03650a1570d27f7df7276f9d6cedc2325fc080c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:24:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:24:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"853646085dd3ad6f1705cfb7b03650a1570d27f7df7276f9d6cedc2325fc080c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:24:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:24:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/853646085dd3ad6f1705cfb7b03650a1570d27f7df7276f9d6cedc2325fc080c"} {"level":"info","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"853646085dd3ad6f1705cfb7b03650a1570d27f7df7276f9d6cedc2325fc080c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"853646085dd3ad6f1705cfb7b03650a1570d27f7df7276f9d6cedc2325fc080c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/853646085dd3ad6f1705cfb7b03650a1570d27f7df7276f9d6cedc2325fc080c"} {"level":"debug","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"853646085dd3ad6f1705cfb7b03650a1570d27f7df7276f9d6cedc2325fc080c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:24:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:24:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["853646085dd3ad6f1705cfb7b03650a1570d27f7df7276f9d6cedc2325fc080c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5"} {"level":"info","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"853646085dd3ad6f1705cfb7b03650a1570d27f7df7276f9d6cedc2325fc080c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"853646085dd3ad6f1705cfb7b03650a1570d27f7df7276f9d6cedc2325fc080c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/853646085dd3ad6f1705cfb7b03650a1570d27f7df7276f9d6cedc2325fc080c"} {"level":"debug","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a52aea15035bd0b5c7f711f598017439b716a0965d0636518e42dac4f8104f6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:24:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:24:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a52aea15035bd0b5c7f711f598017439b716a0965d0636518e42dac4f8104f6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a52aea15035bd0b5c7f711f598017439b716a0965d0636518e42dac4f8104f6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a52aea15035bd0b5c7f711f598017439b716a0965d0636518e42dac4f8104f6a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a52aea15035bd0b5c7f711f598017439b716a0965d0636518e42dac4f8104f6a"} {"level":"debug","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a52aea15035bd0b5c7f711f598017439b716a0965d0636518e42dac4f8104f6a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a52aea15035bd0b5c7f711f598017439b716a0965d0636518e42dac4f8104f6a"} {"level":"debug","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a52aea15035bd0b5c7f711f598017439b716a0965d0636518e42dac4f8104f6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:24:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:24:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a52aea15035bd0b5c7f711f598017439b716a0965d0636518e42dac4f8104f6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a52aea15035bd0b5c7f711f598017439b716a0965d0636518e42dac4f8104f6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a52aea15035bd0b5c7f711f598017439b716a0965d0636518e42dac4f8104f6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb1bde00ffc09731dc2cf0c0eff36d47f4e057460d8c8e870f2593c847e2e744","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a52aea15035bd0b5c7f711f598017439b716a0965d0636518e42dac4f8104f6a"} {"level":"debug","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9b9941017886c48ad7debad3e823e63ad171a4af156d6812fdcdad52bc9b220","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb1bde00ffc09731dc2cf0c0eff36d47f4e057460d8c8e870f2593c847e2e744"} {"level":"debug","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bcfdabdb9f340907949ececf755347aa417e10b21859fed4659209b52bdc2fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9b9941017886c48ad7debad3e823e63ad171a4af156d6812fdcdad52bc9b220"} {"level":"info","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bcfdabdb9f340907949ececf755347aa417e10b21859fed4659209b52bdc2fc"} {"level":"debug","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fba6c60bf624ff9960c851d786f797cf5fa1c734e07103889edd924348c27b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fba6c60bf624ff9960c851d786f797cf5fa1c734e07103889edd924348c27b6"} {"level":"debug","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06d1b5d9d009d5f26f906ed7698c8f7a0c3d74c322eab01f6b334398272b088a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0"} {"level":"info","ts":"2026-07-11T08:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06d1b5d9d009d5f26f906ed7698c8f7a0c3d74c322eab01f6b334398272b088a"} {"level":"debug","ts":"2026-07-11T08:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:24:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:24:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f185c2fb72ffc52c0cb4a69a5e07a5e0e356b65063f90880047ce9c6a647a43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3"} {"level":"debug","ts":"2026-07-11T08:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:24:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:24:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f185c2fb72ffc52c0cb4a69a5e07a5e0e356b65063f90880047ce9c6a647a43"} {"level":"info","ts":"2026-07-11T08:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b4ee544c17a84020b8116f9c039de413b5df0c11a5ca6c16ce60abd018436bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:24:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:24:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3"} {"level":"info","ts":"2026-07-11T08:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76c08ed5a68b394dca6e8aa758ceefdbe3957da354ebf75b704bad8bf680e4e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:24:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:24:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:24:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:24:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-11T08:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-11T08:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1"} {"level":"debug","ts":"2026-07-11T08:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1227cafbeba22680bf039805f5323b5decbdef632326f41e7a5f37e4032b54c5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b4ee544c17a84020b8116f9c039de413b5df0c11a5ca6c16ce60abd018436bd"} {"level":"debug","ts":"2026-07-11T08:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f87d844814a7b92095bc0c18a073ee351470f241bf8b931b4984e9a8cf6effac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76c08ed5a68b394dca6e8aa758ceefdbe3957da354ebf75b704bad8bf680e4e7"} {"level":"debug","ts":"2026-07-11T08:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3"} {"level":"info","ts":"2026-07-11T08:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1227cafbeba22680bf039805f5323b5decbdef632326f41e7a5f37e4032b54c5"} {"level":"info","ts":"2026-07-11T08:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f87d844814a7b92095bc0c18a073ee351470f241bf8b931b4984e9a8cf6effac"} {"level":"debug","ts":"2026-07-11T08:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20bb80d0b4d55c4e2bb0639308d000098ea57eff250b115599f9c99dab24fa42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2"} {"level":"info","ts":"2026-07-11T08:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20bb80d0b4d55c4e2bb0639308d000098ea57eff250b115599f9c99dab24fa42"} {"level":"info","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc073f96-62e9-4d0d-877e-135e7c50ab8d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:54478","PortSpecifier":{"PortValue":54478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dc073f96-62e9-4d0d-877e-135e7c50ab8d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc073f96-62e9-4d0d-877e-135e7c50ab8d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:54478","PortSpecifier":{"PortValue":54478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783758252,"nanos":304064390},"http":{"id":"dc073f96-62e9-4d0d-877e-135e7c50ab8d","method":"POST","headers":{":authority":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dc073f96-62e9-4d0d-877e-135e7c50ab8d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dc073f96-62e9-4d0d-877e-135e7c50ab8d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"]}} {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dc073f96-62e9-4d0d-877e-135e7c50ab8d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc073f96-62e9-4d0d-877e-135e7c50ab8d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc073f96-62e9-4d0d-877e-135e7c50ab8d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc073f96-62e9-4d0d-877e-135e7c50ab8d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f178a6/sub-test-model-f178a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dc073f96-62e9-4d0d-877e-135e7c50ab8d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc073f96-62e9-4d0d-877e-135e7c50ab8d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc073f96-62e9-4d0d-877e-135e7c50ab8d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc073f96-62e9-4d0d-877e-135e7c50ab8d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc073f96-62e9-4d0d-877e-135e7c50ab8d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b9ea721-1af5-406f-8b5d-4051f9eee6a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:59442","PortSpecifier":{"PortValue":59442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9b9ea721-1af5-406f-8b5d-4051f9eee6a9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b9ea721-1af5-406f-8b5d-4051f9eee6a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:59442","PortSpecifier":{"PortValue":59442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783758252,"nanos":340626334},"http":{"id":"9b9ea721-1af5-406f-8b5d-4051f9eee6a9","method":"POST","headers":{":authority":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9b9ea721-1af5-406f-8b5d-4051f9eee6a9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9b9ea721-1af5-406f-8b5d-4051f9eee6a9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"]}} {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9b9ea721-1af5-406f-8b5d-4051f9eee6a9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"06d1b5d9d009d5f26f906ed7698c8f7a0c3d74c322eab01f6b334398272b088a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b9ea721-1af5-406f-8b5d-4051f9eee6a9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b9ea721-1af5-406f-8b5d-4051f9eee6a9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b9ea721-1af5-406f-8b5d-4051f9eee6a9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-12fff0/sub-test-model-12fff0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9b9ea721-1af5-406f-8b5d-4051f9eee6a9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b9ea721-1af5-406f-8b5d-4051f9eee6a9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b9ea721-1af5-406f-8b5d-4051f9eee6a9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b9ea721-1af5-406f-8b5d-4051f9eee6a9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b9ea721-1af5-406f-8b5d-4051f9eee6a9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"64d7fe88-bff7-4e13-ad17-168ab3e035a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:54492","PortSpecifier":{"PortValue":54492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"64d7fe88-bff7-4e13-ad17-168ab3e035a5","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"64d7fe88-bff7-4e13-ad17-168ab3e035a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:54492","PortSpecifier":{"PortValue":54492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783758252,"nanos":377034968},"http":{"id":"64d7fe88-bff7-4e13-ad17-168ab3e035a5","method":"GET","headers":{":authority":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"64d7fe88-bff7-4e13-ad17-168ab3e035a5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2hM7iKquaJORXuFw_q3V8IxqqBUn9RHgPnjqzmOoJMk2SDVnc2SIw2cKKIML"} {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"64d7fe88-bff7-4e13-ad17-168ab3e035a5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f178a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2hM7iKquaJORXuFw_q3V8IxqqBUn9RHgPnjqzmOoJMk2SDVnc2SIw2cKKIML\"}"} {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"64d7fe88-bff7-4e13-ad17-168ab3e035a5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f178a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b16065c8-8190-4a27-844d-441c28eba49f","keyName":"e2e-sub-iso-3901bc","subscription":"e2e-a-only-7708ef","tenant":"e2e-shared-a-f178a6","userId":"b16065c8-8190-4a27-844d-441c28eba49f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"64d7fe88-bff7-4e13-ad17-168ab3e035a5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64d7fe88-bff7-4e13-ad17-168ab3e035a5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64d7fe88-bff7-4e13-ad17-168ab3e035a5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64d7fe88-bff7-4e13-ad17-168ab3e035a5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f178a6/sub-test-model-f178a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64d7fe88-bff7-4e13-ad17-168ab3e035a5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"64d7fe88-bff7-4e13-ad17-168ab3e035a5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64d7fe88-bff7-4e13-ad17-168ab3e035a5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-7708ef"} {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64d7fe88-bff7-4e13-ad17-168ab3e035a5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"64d7fe88-bff7-4e13-ad17-168ab3e035a5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"64d7fe88-bff7-4e13-ad17-168ab3e035a5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3091b19-fa6f-47e5-9d4b-8c95ffdee043","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:59450","PortSpecifier":{"PortValue":59450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b3091b19-fa6f-47e5-9d4b-8c95ffdee043","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3091b19-fa6f-47e5-9d4b-8c95ffdee043","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:59450","PortSpecifier":{"PortValue":59450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783758252,"nanos":407921390},"http":{"id":"b3091b19-fa6f-47e5-9d4b-8c95ffdee043","method":"GET","headers":{":authority":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b3091b19-fa6f-47e5-9d4b-8c95ffdee043","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8MbAZZVXbQrLZz3d_WKPNsnF7B0BH09FWevucOjZRaJjQmkErK0tSVKzs7WD"} {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b3091b19-fa6f-47e5-9d4b-8c95ffdee043","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-12fff0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8MbAZZVXbQrLZz3d_WKPNsnF7B0BH09FWevucOjZRaJjQmkErK0tSVKzs7WD\"}"} {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b3091b19-fa6f-47e5-9d4b-8c95ffdee043","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-12fff0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"64aaa89a-927e-4afc-9374-a143312ece1a","keyName":"e2e-sub-iso-9ee88e","subscription":"e2e-b-only-7708ef","tenant":"e2e-shared-b-12fff0","userId":"64aaa89a-927e-4afc-9374-a143312ece1a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b3091b19-fa6f-47e5-9d4b-8c95ffdee043","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3091b19-fa6f-47e5-9d4b-8c95ffdee043","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3091b19-fa6f-47e5-9d4b-8c95ffdee043","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3091b19-fa6f-47e5-9d4b-8c95ffdee043","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-12fff0/sub-test-model-12fff0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b3091b19-fa6f-47e5-9d4b-8c95ffdee043","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3091b19-fa6f-47e5-9d4b-8c95ffdee043","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-7708ef"} {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3091b19-fa6f-47e5-9d4b-8c95ffdee043","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3091b19-fa6f-47e5-9d4b-8c95ffdee043","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3091b19-fa6f-47e5-9d4b-8c95ffdee043","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-11T08:24:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3091b19-fa6f-47e5-9d4b-8c95ffdee043","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dba553c1-5e57-4e51-9a27-77516b9fb192","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:35024","PortSpecifier":{"PortValue":35024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dba553c1-5e57-4e51-9a27-77516b9fb192","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dba553c1-5e57-4e51-9a27-77516b9fb192","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:35024","PortSpecifier":{"PortValue":35024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783758262,"nanos":383060681},"http":{"id":"dba553c1-5e57-4e51-9a27-77516b9fb192","method":"POST","headers":{":authority":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dba553c1-5e57-4e51-9a27-77516b9fb192","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dba553c1-5e57-4e51-9a27-77516b9fb192","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"]}} {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dba553c1-5e57-4e51-9a27-77516b9fb192","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dba553c1-5e57-4e51-9a27-77516b9fb192","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dba553c1-5e57-4e51-9a27-77516b9fb192","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dba553c1-5e57-4e51-9a27-77516b9fb192","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f178a6/sub-test-model-f178a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dba553c1-5e57-4e51-9a27-77516b9fb192","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dba553c1-5e57-4e51-9a27-77516b9fb192","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dba553c1-5e57-4e51-9a27-77516b9fb192","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dba553c1-5e57-4e51-9a27-77516b9fb192","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dba553c1-5e57-4e51-9a27-77516b9fb192","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f8ecade-a6c2-4eca-9412-9ae3f92cabf8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:53358","PortSpecifier":{"PortValue":53358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4f8ecade-a6c2-4eca-9412-9ae3f92cabf8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f8ecade-a6c2-4eca-9412-9ae3f92cabf8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:53358","PortSpecifier":{"PortValue":53358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783758262,"nanos":411725116},"http":{"id":"4f8ecade-a6c2-4eca-9412-9ae3f92cabf8","method":"POST","headers":{":authority":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4f8ecade-a6c2-4eca-9412-9ae3f92cabf8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4f8ecade-a6c2-4eca-9412-9ae3f92cabf8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"]}} {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4f8ecade-a6c2-4eca-9412-9ae3f92cabf8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"06d1b5d9d009d5f26f906ed7698c8f7a0c3d74c322eab01f6b334398272b088a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f8ecade-a6c2-4eca-9412-9ae3f92cabf8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f8ecade-a6c2-4eca-9412-9ae3f92cabf8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f8ecade-a6c2-4eca-9412-9ae3f92cabf8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-12fff0/sub-test-model-12fff0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4f8ecade-a6c2-4eca-9412-9ae3f92cabf8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f8ecade-a6c2-4eca-9412-9ae3f92cabf8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f8ecade-a6c2-4eca-9412-9ae3f92cabf8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f8ecade-a6c2-4eca-9412-9ae3f92cabf8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f8ecade-a6c2-4eca-9412-9ae3f92cabf8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"847d2758-4023-4915-9cb8-959289de83f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:35026","PortSpecifier":{"PortValue":35026}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"847d2758-4023-4915-9cb8-959289de83f8","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"847d2758-4023-4915-9cb8-959289de83f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:35026","PortSpecifier":{"PortValue":35026}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783758262,"nanos":463088836},"http":{"id":"847d2758-4023-4915-9cb8-959289de83f8","method":"POST","headers":{":authority":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"847d2758-4023-4915-9cb8-959289de83f8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-RQEDnfDqKfTaXLTX_3E5RSl7cOUIoa4lNu5FA16ahbgqXIkIxfAiAFFDJ1D"} {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"847d2758-4023-4915-9cb8-959289de83f8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f178a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-RQEDnfDqKfTaXLTX_3E5RSl7cOUIoa4lNu5FA16ahbgqXIkIxfAiAFFDJ1D\"}"} {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"847d2758-4023-4915-9cb8-959289de83f8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f178a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"61c6a8a2-6909-4bb7-8a47-28c19cd41391","keyName":"e2e-sub-iso-650ae2","subscription":"e2e-shared-sub-3b864d","tenant":"e2e-shared-a-f178a6","userId":"61c6a8a2-6909-4bb7-8a47-28c19cd41391","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"847d2758-4023-4915-9cb8-959289de83f8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"847d2758-4023-4915-9cb8-959289de83f8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"847d2758-4023-4915-9cb8-959289de83f8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"847d2758-4023-4915-9cb8-959289de83f8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f178a6/sub-test-model-f178a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"847d2758-4023-4915-9cb8-959289de83f8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"847d2758-4023-4915-9cb8-959289de83f8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"847d2758-4023-4915-9cb8-959289de83f8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"847d2758-4023-4915-9cb8-959289de83f8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-3b864d"} {"level":"info","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"847d2758-4023-4915-9cb8-959289de83f8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"847d2758-4023-4915-9cb8-959289de83f8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7b7dd70f-89f9-46db-ba6d-595a141d3bb7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:53364","PortSpecifier":{"PortValue":53364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7b7dd70f-89f9-46db-ba6d-595a141d3bb7","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7b7dd70f-89f9-46db-ba6d-595a141d3bb7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:53364","PortSpecifier":{"PortValue":53364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783758262,"nanos":488799406},"http":{"id":"7b7dd70f-89f9-46db-ba6d-595a141d3bb7","method":"POST","headers":{":authority":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7b7dd70f-89f9-46db-ba6d-595a141d3bb7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-OnQ3fqHGlWKQ1uIe_VML1TG6HQjtFNMqRFfEOYeHLJp3UA1CEMaLSNdUvVvp"} {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7b7dd70f-89f9-46db-ba6d-595a141d3bb7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-12fff0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-OnQ3fqHGlWKQ1uIe_VML1TG6HQjtFNMqRFfEOYeHLJp3UA1CEMaLSNdUvVvp\"}"} {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7b7dd70f-89f9-46db-ba6d-595a141d3bb7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-12fff0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f1e87e53-393b-47a9-9e4c-c52349c2d0c5","keyName":"e2e-sub-iso-0b2800","subscription":"e2e-shared-sub-3b864d","tenant":"e2e-shared-b-12fff0","userId":"f1e87e53-393b-47a9-9e4c-c52349c2d0c5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7b7dd70f-89f9-46db-ba6d-595a141d3bb7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b7dd70f-89f9-46db-ba6d-595a141d3bb7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b7dd70f-89f9-46db-ba6d-595a141d3bb7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-12fff0/sub-test-model-12fff0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b7dd70f-89f9-46db-ba6d-595a141d3bb7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7b7dd70f-89f9-46db-ba6d-595a141d3bb7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b7dd70f-89f9-46db-ba6d-595a141d3bb7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b7dd70f-89f9-46db-ba6d-595a141d3bb7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b7dd70f-89f9-46db-ba6d-595a141d3bb7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-3b864d"} {"level":"info","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7b7dd70f-89f9-46db-ba6d-595a141d3bb7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-11T08:24:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7b7dd70f-89f9-46db-ba6d-595a141d3bb7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-11T08:24:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56d108be07474eec7a4dec73e23375ce5bd34df042a924f2b4bcc6ca7a2a5917"} {"level":"info","ts":"2026-07-11T08:24:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fcf269eb045b6dd537c5f7182b2c673820c375d5c77e6d0b11f10aa4ead333ae"} {"level":"info","ts":"2026-07-11T08:24:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c06a60d8609feb97912bc54c821b2d6a4bdf6f8ccc1060d01854c5153966a2a1"} {"level":"info","ts":"2026-07-11T08:24:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20bb80d0b4d55c4e2bb0639308d000098ea57eff250b115599f9c99dab24fa42"} {"level":"info","ts":"2026-07-11T08:24:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1bcfdabdb9f340907949ececf755347aa417e10b21859fed4659209b52bdc2fc"} {"level":"info","ts":"2026-07-11T08:24:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76c08ed5a68b394dca6e8aa758ceefdbe3957da354ebf75b704bad8bf680e4e7"} {"level":"info","ts":"2026-07-11T08:24:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f185c2fb72ffc52c0cb4a69a5e07a5e0e356b65063f90880047ce9c6a647a43"} {"level":"info","ts":"2026-07-11T08:24:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f87d844814a7b92095bc0c18a073ee351470f241bf8b931b4984e9a8cf6effac"} {"level":"info","ts":"2026-07-11T08:24:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae8dc0a7545a5a1b1cb131c9e709bcdc3034c2310e83bfe656e90df5956add6d"} {"level":"info","ts":"2026-07-11T08:24:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b4ee544c17a84020b8116f9c039de413b5df0c11a5ca6c16ce60abd018436bd"} {"level":"info","ts":"2026-07-11T08:24:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3fba6c60bf624ff9960c851d786f797cf5fa1c734e07103889edd924348c27b6"} {"level":"info","ts":"2026-07-11T08:24:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb1bde00ffc09731dc2cf0c0eff36d47f4e057460d8c8e870f2593c847e2e744"} {"level":"info","ts":"2026-07-11T08:24:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f9b9941017886c48ad7debad3e823e63ad171a4af156d6812fdcdad52bc9b220"} {"level":"info","ts":"2026-07-11T08:24:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c47cf5360769f109ba638115ae0d26da511325bb62ba65952f675126dae5d1b9"} {"level":"info","ts":"2026-07-11T08:24:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/94d95cca81e2b04632b1f9eada641e2c836f98b0a10bd55b77a42ec48d548ae5"} {"level":"info","ts":"2026-07-11T08:24:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9485bea8951ffc25afa1e278029640d3004aa44471d5bde7e3d028d596ed44e0"} {"level":"debug","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91a236f4d760ea12c4641781eb285c855b8109c5bc1ed56f324291a491cef9d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:24:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:24:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91a236f4d760ea12c4641781eb285c855b8109c5bc1ed56f324291a491cef9d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91a236f4d760ea12c4641781eb285c855b8109c5bc1ed56f324291a491cef9d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91a236f4d760ea12c4641781eb285c855b8109c5bc1ed56f324291a491cef9d6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91a236f4d760ea12c4641781eb285c855b8109c5bc1ed56f324291a491cef9d6"} {"level":"debug","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91a236f4d760ea12c4641781eb285c855b8109c5bc1ed56f324291a491cef9d6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91a236f4d760ea12c4641781eb285c855b8109c5bc1ed56f324291a491cef9d6"} {"level":"debug","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91a236f4d760ea12c4641781eb285c855b8109c5bc1ed56f324291a491cef9d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:24:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:24:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91a236f4d760ea12c4641781eb285c855b8109c5bc1ed56f324291a491cef9d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91a236f4d760ea12c4641781eb285c855b8109c5bc1ed56f324291a491cef9d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91a236f4d760ea12c4641781eb285c855b8109c5bc1ed56f324291a491cef9d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:24:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:24:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91a236f4d760ea12c4641781eb285c855b8109c5bc1ed56f324291a491cef9d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4a7f6b4a0a7e9ebcaadbf44b92f8c25fccc7830b89a2305464391cc6a6de67a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:24:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:24:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4a7f6b4a0a7e9ebcaadbf44b92f8c25fccc7830b89a2305464391cc6a6de67a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91a236f4d760ea12c4641781eb285c855b8109c5bc1ed56f324291a491cef9d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4a7f6b4a0a7e9ebcaadbf44b92f8c25fccc7830b89a2305464391cc6a6de67a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4a7f6b4a0a7e9ebcaadbf44b92f8c25fccc7830b89a2305464391cc6a6de67a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91a236f4d760ea12c4641781eb285c855b8109c5bc1ed56f324291a491cef9d6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91a236f4d760ea12c4641781eb285c855b8109c5bc1ed56f324291a491cef9d6"} {"level":"debug","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4a7f6b4a0a7e9ebcaadbf44b92f8c25fccc7830b89a2305464391cc6a6de67a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:24:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:24:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4a7f6b4a0a7e9ebcaadbf44b92f8c25fccc7830b89a2305464391cc6a6de67a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91a236f4d760ea12c4641781eb285c855b8109c5bc1ed56f324291a491cef9d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:24:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:24:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91a236f4d760ea12c4641781eb285c855b8109c5bc1ed56f324291a491cef9d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4a7f6b4a0a7e9ebcaadbf44b92f8c25fccc7830b89a2305464391cc6a6de67a"} {"level":"info","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91a236f4d760ea12c4641781eb285c855b8109c5bc1ed56f324291a491cef9d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4a7f6b4a0a7e9ebcaadbf44b92f8c25fccc7830b89a2305464391cc6a6de67a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:24:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:24:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4a7f6b4a0a7e9ebcaadbf44b92f8c25fccc7830b89a2305464391cc6a6de67a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91a236f4d760ea12c4641781eb285c855b8109c5bc1ed56f324291a491cef9d6"} {"level":"info","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4a7f6b4a0a7e9ebcaadbf44b92f8c25fccc7830b89a2305464391cc6a6de67a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91a236f4d760ea12c4641781eb285c855b8109c5bc1ed56f324291a491cef9d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4a7f6b4a0a7e9ebcaadbf44b92f8c25fccc7830b89a2305464391cc6a6de67a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:24:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:24:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4a7f6b4a0a7e9ebcaadbf44b92f8c25fccc7830b89a2305464391cc6a6de67a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4a7f6b4a0a7e9ebcaadbf44b92f8c25fccc7830b89a2305464391cc6a6de67a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4a7f6b4a0a7e9ebcaadbf44b92f8c25fccc7830b89a2305464391cc6a6de67a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"851cb3cdfd33dfa64dfb9f282eb4b511d34d67b8df62441491b175c5e25215f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:24:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:24:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4a7f6b4a0a7e9ebcaadbf44b92f8c25fccc7830b89a2305464391cc6a6de67a"} {"level":"info","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"851cb3cdfd33dfa64dfb9f282eb4b511d34d67b8df62441491b175c5e25215f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"851cb3cdfd33dfa64dfb9f282eb4b511d34d67b8df62441491b175c5e25215f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"851cb3cdfd33dfa64dfb9f282eb4b511d34d67b8df62441491b175c5e25215f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4a7f6b4a0a7e9ebcaadbf44b92f8c25fccc7830b89a2305464391cc6a6de67a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:24:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:24:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4a7f6b4a0a7e9ebcaadbf44b92f8c25fccc7830b89a2305464391cc6a6de67a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91a236f4d760ea12c4641781eb285c855b8109c5bc1ed56f324291a491cef9d6"} {"level":"info","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4a7f6b4a0a7e9ebcaadbf44b92f8c25fccc7830b89a2305464391cc6a6de67a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4a7f6b4a0a7e9ebcaadbf44b92f8c25fccc7830b89a2305464391cc6a6de67a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"851cb3cdfd33dfa64dfb9f282eb4b511d34d67b8df62441491b175c5e25215f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:24:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:24:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/851cb3cdfd33dfa64dfb9f282eb4b511d34d67b8df62441491b175c5e25215f9"} {"level":"info","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"851cb3cdfd33dfa64dfb9f282eb4b511d34d67b8df62441491b175c5e25215f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"851cb3cdfd33dfa64dfb9f282eb4b511d34d67b8df62441491b175c5e25215f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:24:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:24:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["851cb3cdfd33dfa64dfb9f282eb4b511d34d67b8df62441491b175c5e25215f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"851cb3cdfd33dfa64dfb9f282eb4b511d34d67b8df62441491b175c5e25215f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"851cb3cdfd33dfa64dfb9f282eb4b511d34d67b8df62441491b175c5e25215f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4a7f6b4a0a7e9ebcaadbf44b92f8c25fccc7830b89a2305464391cc6a6de67a"} {"level":"info","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/851cb3cdfd33dfa64dfb9f282eb4b511d34d67b8df62441491b175c5e25215f9"} {"level":"debug","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"851cb3cdfd33dfa64dfb9f282eb4b511d34d67b8df62441491b175c5e25215f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:24:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:24:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe"} {"level":"debug","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe"} {"level":"debug","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d865c6b541b5de049970b989b66394373852a245295035aed1a556729d6fdcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe"} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d865c6b541b5de049970b989b66394373852a245295035aed1a556729d6fdcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d865c6b541b5de049970b989b66394373852a245295035aed1a556729d6fdcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d865c6b541b5de049970b989b66394373852a245295035aed1a556729d6fdcd"} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d865c6b541b5de049970b989b66394373852a245295035aed1a556729d6fdcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d865c6b541b5de049970b989b66394373852a245295035aed1a556729d6fdcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d865c6b541b5de049970b989b66394373852a245295035aed1a556729d6fdcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe"} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d865c6b541b5de049970b989b66394373852a245295035aed1a556729d6fdcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d865c6b541b5de049970b989b66394373852a245295035aed1a556729d6fdcd"} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d865c6b541b5de049970b989b66394373852a245295035aed1a556729d6fdcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe"} {"level":"debug","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d865c6b541b5de049970b989b66394373852a245295035aed1a556729d6fdcd"} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe"} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b"} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe"} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b"} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0e38d5dadd84288104e62ac194df0fcf4058855496d490c520fedbed0405b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0e38d5dadd84288104e62ac194df0fcf4058855496d490c520fedbed0405b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe"} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0e38d5dadd84288104e62ac194df0fcf4058855496d490c520fedbed0405b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0e38d5dadd84288104e62ac194df0fcf4058855496d490c520fedbed0405b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0e38d5dadd84288104e62ac194df0fcf4058855496d490c520fedbed0405b4"} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b"} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b0e38d5dadd84288104e62ac194df0fcf4058855496d490c520fedbed0405b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0e38d5dadd84288104e62ac194df0fcf4058855496d490c520fedbed0405b4"} {"level":"error","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b4389bde531b35dfd7998e2255a55e43f33351bd316715bfad193d9692d478f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b4389bde531b35dfd7998e2255a55e43f33351bd316715bfad193d9692d478f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0e38d5dadd84288104e62ac194df0fcf4058855496d490c520fedbed0405b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b0e38d5dadd84288104e62ac194df0fcf4058855496d490c520fedbed0405b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe"} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0e38d5dadd84288104e62ac194df0fcf4058855496d490c520fedbed0405b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b4389bde531b35dfd7998e2255a55e43f33351bd316715bfad193d9692d478f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b0e38d5dadd84288104e62ac194df0fcf4058855496d490c520fedbed0405b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b"} {"level":"debug","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b4389bde531b35dfd7998e2255a55e43f33351bd316715bfad193d9692d478f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b4389bde531b35dfd7998e2255a55e43f33351bd316715bfad193d9692d478f"} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b4389bde531b35dfd7998e2255a55e43f33351bd316715bfad193d9692d478f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b4389bde531b35dfd7998e2255a55e43f33351bd316715bfad193d9692d478f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:24:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b4389bde531b35dfd7998e2255a55e43f33351bd316715bfad193d9692d478f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0e38d5dadd84288104e62ac194df0fcf4058855496d490c520fedbed0405b4"} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b4389bde531b35dfd7998e2255a55e43f33351bd316715bfad193d9692d478f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b4389bde531b35dfd7998e2255a55e43f33351bd316715bfad193d9692d478f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b4389bde531b35dfd7998e2255a55e43f33351bd316715bfad193d9692d478f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b"} {"level":"info","ts":"2026-07-11T08:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b4389bde531b35dfd7998e2255a55e43f33351bd316715bfad193d9692d478f"} {"level":"debug","ts":"2026-07-11T08:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:24:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:24:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:24:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:24:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e"} {"level":"info","ts":"2026-07-11T08:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:24:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:24:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-11T08:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-11T08:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e"} {"level":"info","ts":"2026-07-11T08:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e"} {"level":"debug","ts":"2026-07-11T08:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:24:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:24:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:24:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:24:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e"} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e"} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e"} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e"} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7"} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e"} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7"} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c77ca88036a287c612cffb23b581a2cd529a80e18795bf4559a70d806b1cda76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e"} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7"} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c77ca88036a287c612cffb23b581a2cd529a80e18795bf4559a70d806b1cda76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b696f94cf757b933f1c74316b829a4fbcd1b54658795f23557f2fdb61e599036","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c77ca88036a287c612cffb23b581a2cd529a80e18795bf4559a70d806b1cda76"} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b696f94cf757b933f1c74316b829a4fbcd1b54658795f23557f2fdb61e599036","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c77ca88036a287c612cffb23b581a2cd529a80e18795bf4559a70d806b1cda76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c77ca88036a287c612cffb23b581a2cd529a80e18795bf4559a70d806b1cda76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b696f94cf757b933f1c74316b829a4fbcd1b54658795f23557f2fdb61e599036"} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c77ca88036a287c612cffb23b581a2cd529a80e18795bf4559a70d806b1cda76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b696f94cf757b933f1c74316b829a4fbcd1b54658795f23557f2fdb61e599036","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b696f94cf757b933f1c74316b829a4fbcd1b54658795f23557f2fdb61e599036"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e"} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b696f94cf757b933f1c74316b829a4fbcd1b54658795f23557f2fdb61e599036","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c77ca88036a287c612cffb23b581a2cd529a80e18795bf4559a70d806b1cda76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c77ca88036a287c612cffb23b581a2cd529a80e18795bf4559a70d806b1cda76"} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c77ca88036a287c612cffb23b581a2cd529a80e18795bf4559a70d806b1cda76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b696f94cf757b933f1c74316b829a4fbcd1b54658795f23557f2fdb61e599036","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b696f94cf757b933f1c74316b829a4fbcd1b54658795f23557f2fdb61e599036"} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b696f94cf757b933f1c74316b829a4fbcd1b54658795f23557f2fdb61e599036","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2adcf764fb3e9520cc4b13de26fe0e31fd5b9124854650c9de4d5fb13cf81073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2adcf764fb3e9520cc4b13de26fe0e31fd5b9124854650c9de4d5fb13cf81073"} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2adcf764fb3e9520cc4b13de26fe0e31fd5b9124854650c9de4d5fb13cf81073","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c77ca88036a287c612cffb23b581a2cd529a80e18795bf4559a70d806b1cda76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b696f94cf757b933f1c74316b829a4fbcd1b54658795f23557f2fdb61e599036","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b696f94cf757b933f1c74316b829a4fbcd1b54658795f23557f2fdb61e599036"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c77ca88036a287c612cffb23b581a2cd529a80e18795bf4559a70d806b1cda76"} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b696f94cf757b933f1c74316b829a4fbcd1b54658795f23557f2fdb61e599036","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2adcf764fb3e9520cc4b13de26fe0e31fd5b9124854650c9de4d5fb13cf81073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2adcf764fb3e9520cc4b13de26fe0e31fd5b9124854650c9de4d5fb13cf81073"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2adcf764fb3e9520cc4b13de26fe0e31fd5b9124854650c9de4d5fb13cf81073","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c77ca88036a287c612cffb23b581a2cd529a80e18795bf4559a70d806b1cda76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c77ca88036a287c612cffb23b581a2cd529a80e18795bf4559a70d806b1cda76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b696f94cf757b933f1c74316b829a4fbcd1b54658795f23557f2fdb61e599036"} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c77ca88036a287c612cffb23b581a2cd529a80e18795bf4559a70d806b1cda76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b696f94cf757b933f1c74316b829a4fbcd1b54658795f23557f2fdb61e599036","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2adcf764fb3e9520cc4b13de26fe0e31fd5b9124854650c9de4d5fb13cf81073"} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2adcf764fb3e9520cc4b13de26fe0e31fd5b9124854650c9de4d5fb13cf81073","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c77ca88036a287c612cffb23b581a2cd529a80e18795bf4559a70d806b1cda76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca"} {"level":"error","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b696f94cf757b933f1c74316b829a4fbcd1b54658795f23557f2fdb61e599036"} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c77ca88036a287c612cffb23b581a2cd529a80e18795bf4559a70d806b1cda76"} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca"} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd"} {"level":"error","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd"} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f67e0c30b17c92b7640887b26197269f9edd12c254ddc3975dc753e18e2a66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f67e0c30b17c92b7640887b26197269f9edd12c254ddc3975dc753e18e2a66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f67e0c30b17c92b7640887b26197269f9edd12c254ddc3975dc753e18e2a66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f67e0c30b17c92b7640887b26197269f9edd12c254ddc3975dc753e18e2a66"} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f67e0c30b17c92b7640887b26197269f9edd12c254ddc3975dc753e18e2a66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f67e0c30b17c92b7640887b26197269f9edd12c254ddc3975dc753e18e2a66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"28f67e0c30b17c92b7640887b26197269f9edd12c254ddc3975dc753e18e2a66","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"28f67e0c30b17c92b7640887b26197269f9edd12c254ddc3975dc753e18e2a66\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f67e0c30b17c92b7640887b26197269f9edd12c254ddc3975dc753e18e2a66"} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f67e0c30b17c92b7640887b26197269f9edd12c254ddc3975dc753e18e2a66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f67e0c30b17c92b7640887b26197269f9edd12c254ddc3975dc753e18e2a66"} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f67e0c30b17c92b7640887b26197269f9edd12c254ddc3975dc753e18e2a66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28f67e0c30b17c92b7640887b26197269f9edd12c254ddc3975dc753e18e2a66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd"} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f67e0c30b17c92b7640887b26197269f9edd12c254ddc3975dc753e18e2a66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f67e0c30b17c92b7640887b26197269f9edd12c254ddc3975dc753e18e2a66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f67e0c30b17c92b7640887b26197269f9edd12c254ddc3975dc753e18e2a66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f67e0c30b17c92b7640887b26197269f9edd12c254ddc3975dc753e18e2a66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f67e0c30b17c92b7640887b26197269f9edd12c254ddc3975dc753e18e2a66","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f67e0c30b17c92b7640887b26197269f9edd12c254ddc3975dc753e18e2a66"} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f67e0c30b17c92b7640887b26197269f9edd12c254ddc3975dc753e18e2a66","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f67e0c30b17c92b7640887b26197269f9edd12c254ddc3975dc753e18e2a66"} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f67e0c30b17c92b7640887b26197269f9edd12c254ddc3975dc753e18e2a66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:25:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28f67e0c30b17c92b7640887b26197269f9edd12c254ddc3975dc753e18e2a66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f67e0c30b17c92b7640887b26197269f9edd12c254ddc3975dc753e18e2a66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f67e0c30b17c92b7640887b26197269f9edd12c254ddc3975dc753e18e2a66","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f67e0c30b17c92b7640887b26197269f9edd12c254ddc3975dc753e18e2a66"} {"level":"debug","ts":"2026-07-11T08:25:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1227cafbeba22680bf039805f5323b5decbdef632326f41e7a5f37e4032b54c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:25:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:25:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1227cafbeba22680bf039805f5323b5decbdef632326f41e7a5f37e4032b54c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1227cafbeba22680bf039805f5323b5decbdef632326f41e7a5f37e4032b54c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1227cafbeba22680bf039805f5323b5decbdef632326f41e7a5f37e4032b54c5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1227cafbeba22680bf039805f5323b5decbdef632326f41e7a5f37e4032b54c5"} {"level":"debug","ts":"2026-07-11T08:25:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1227cafbeba22680bf039805f5323b5decbdef632326f41e7a5f37e4032b54c5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1227cafbeba22680bf039805f5323b5decbdef632326f41e7a5f37e4032b54c5"} {"level":"debug","ts":"2026-07-11T08:25:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1227cafbeba22680bf039805f5323b5decbdef632326f41e7a5f37e4032b54c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:25:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:25:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1227cafbeba22680bf039805f5323b5decbdef632326f41e7a5f37e4032b54c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1227cafbeba22680bf039805f5323b5decbdef632326f41e7a5f37e4032b54c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1227cafbeba22680bf039805f5323b5decbdef632326f41e7a5f37e4032b54c5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1227cafbeba22680bf039805f5323b5decbdef632326f41e7a5f37e4032b54c5"} {"level":"debug","ts":"2026-07-11T08:25:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:25:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:25:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd"} {"level":"debug","ts":"2026-07-11T08:25:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd"} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:25:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:25:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:25:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:25:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a52aea15035bd0b5c7f711f598017439b716a0965d0636518e42dac4f8104f6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd"} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:25:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:25:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a52aea15035bd0b5c7f711f598017439b716a0965d0636518e42dac4f8104f6a"} {"level":"info","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:25:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:25:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd"} {"level":"info","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd"} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd"} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:25:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:25:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:25:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:25:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd"} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd"} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:25:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:25:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd"} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38fd9ee1b38b02f47417ef7d0628d20ae6a21769dd8d2e209f479b0cea50d9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:25:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:25:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38fd9ee1b38b02f47417ef7d0628d20ae6a21769dd8d2e209f479b0cea50d9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38fd9ee1b38b02f47417ef7d0628d20ae6a21769dd8d2e209f479b0cea50d9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38fd9ee1b38b02f47417ef7d0628d20ae6a21769dd8d2e209f479b0cea50d9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38fd9ee1b38b02f47417ef7d0628d20ae6a21769dd8d2e209f479b0cea50d9a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38fd9ee1b38b02f47417ef7d0628d20ae6a21769dd8d2e209f479b0cea50d9a"} {"level":"info","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38fd9ee1b38b02f47417ef7d0628d20ae6a21769dd8d2e209f479b0cea50d9a"} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38fd9ee1b38b02f47417ef7d0628d20ae6a21769dd8d2e209f479b0cea50d9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:25:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:25:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e38fd9ee1b38b02f47417ef7d0628d20ae6a21769dd8d2e209f479b0cea50d9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38fd9ee1b38b02f47417ef7d0628d20ae6a21769dd8d2e209f479b0cea50d9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38fd9ee1b38b02f47417ef7d0628d20ae6a21769dd8d2e209f479b0cea50d9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b696f94cf757b933f1c74316b829a4fbcd1b54658795f23557f2fdb61e599036","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38fd9ee1b38b02f47417ef7d0628d20ae6a21769dd8d2e209f479b0cea50d9a"} {"level":"info","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b696f94cf757b933f1c74316b829a4fbcd1b54658795f23557f2fdb61e599036"} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b0e38d5dadd84288104e62ac194df0fcf4058855496d490c520fedbed0405b4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0e38d5dadd84288104e62ac194df0fcf4058855496d490c520fedbed0405b4"} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:25:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:25:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f67e0c30b17c92b7640887b26197269f9edd12c254ddc3975dc753e18e2a66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca"} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:25:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:25:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f67e0c30b17c92b7640887b26197269f9edd12c254ddc3975dc753e18e2a66"} {"level":"info","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:25:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:25:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca"} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca"} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:25:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:25:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:25:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:25:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06d1b5d9d009d5f26f906ed7698c8f7a0c3d74c322eab01f6b334398272b088a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca"} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:25:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:25:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06d1b5d9d009d5f26f906ed7698c8f7a0c3d74c322eab01f6b334398272b088a"} {"level":"info","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca"} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:25:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:25:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7"} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7"} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:25:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:25:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:25:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:25:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b4389bde531b35dfd7998e2255a55e43f33351bd316715bfad193d9692d478f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7"} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:25:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:25:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b4389bde531b35dfd7998e2255a55e43f33351bd316715bfad193d9692d478f"} {"level":"info","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:25:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:25:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7"} {"level":"debug","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7"} {"level":"debug","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7"} {"level":"debug","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:25:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:25:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:25:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:25:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7"} {"level":"debug","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7"} {"level":"debug","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:25:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:25:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:25:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:25:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b"} {"level":"info","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b"} {"level":"debug","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:25:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:25:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7"} {"level":"info","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:25:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:25:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b"} {"level":"debug","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b"} {"level":"debug","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e"} {"level":"debug","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:25:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:25:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b"} {"level":"debug","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"851cb3cdfd33dfa64dfb9f282eb4b511d34d67b8df62441491b175c5e25215f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:25:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:25:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"851cb3cdfd33dfa64dfb9f282eb4b511d34d67b8df62441491b175c5e25215f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"851cb3cdfd33dfa64dfb9f282eb4b511d34d67b8df62441491b175c5e25215f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"851cb3cdfd33dfa64dfb9f282eb4b511d34d67b8df62441491b175c5e25215f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/851cb3cdfd33dfa64dfb9f282eb4b511d34d67b8df62441491b175c5e25215f9"} {"level":"debug","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"851cb3cdfd33dfa64dfb9f282eb4b511d34d67b8df62441491b175c5e25215f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/851cb3cdfd33dfa64dfb9f282eb4b511d34d67b8df62441491b175c5e25215f9"} {"level":"debug","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"851cb3cdfd33dfa64dfb9f282eb4b511d34d67b8df62441491b175c5e25215f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:25:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:25:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["851cb3cdfd33dfa64dfb9f282eb4b511d34d67b8df62441491b175c5e25215f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"851cb3cdfd33dfa64dfb9f282eb4b511d34d67b8df62441491b175c5e25215f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"851cb3cdfd33dfa64dfb9f282eb4b511d34d67b8df62441491b175c5e25215f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T08:25:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T08:25:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"851cb3cdfd33dfa64dfb9f282eb4b511d34d67b8df62441491b175c5e25215f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c77ca88036a287c612cffb23b581a2cd529a80e18795bf4559a70d806b1cda76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"851cb3cdfd33dfa64dfb9f282eb4b511d34d67b8df62441491b175c5e25215f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"851cb3cdfd33dfa64dfb9f282eb4b511d34d67b8df62441491b175c5e25215f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91a236f4d760ea12c4641781eb285c855b8109c5bc1ed56f324291a491cef9d6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/851cb3cdfd33dfa64dfb9f282eb4b511d34d67b8df62441491b175c5e25215f9"} {"level":"debug","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"853646085dd3ad6f1705cfb7b03650a1570d27f7df7276f9d6cedc2325fc080c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"851cb3cdfd33dfa64dfb9f282eb4b511d34d67b8df62441491b175c5e25215f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T08:25:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T08:25:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["851cb3cdfd33dfa64dfb9f282eb4b511d34d67b8df62441491b175c5e25215f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c77ca88036a287c612cffb23b581a2cd529a80e18795bf4559a70d806b1cda76"} {"level":"info","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"851cb3cdfd33dfa64dfb9f282eb4b511d34d67b8df62441491b175c5e25215f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d865c6b541b5de049970b989b66394373852a245295035aed1a556729d6fdcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"851cb3cdfd33dfa64dfb9f282eb4b511d34d67b8df62441491b175c5e25215f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4a7f6b4a0a7e9ebcaadbf44b92f8c25fccc7830b89a2305464391cc6a6de67a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91a236f4d760ea12c4641781eb285c855b8109c5bc1ed56f324291a491cef9d6"} {"level":"info","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/851cb3cdfd33dfa64dfb9f282eb4b511d34d67b8df62441491b175c5e25215f9"} {"level":"debug","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/853646085dd3ad6f1705cfb7b03650a1570d27f7df7276f9d6cedc2325fc080c"} {"level":"debug","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d865c6b541b5de049970b989b66394373852a245295035aed1a556729d6fdcd"} {"level":"debug","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4a7f6b4a0a7e9ebcaadbf44b92f8c25fccc7830b89a2305464391cc6a6de67a"} {"level":"info","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe"} {"level":"info","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3"} {"level":"debug","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2adcf764fb3e9520cc4b13de26fe0e31fd5b9124854650c9de4d5fb13cf81073","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1"} {"level":"debug","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2adcf764fb3e9520cc4b13de26fe0e31fd5b9124854650c9de4d5fb13cf81073"} {"level":"info","ts":"2026-07-11T08:25:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2"} {"level":"info","ts":"2026-07-11T08:25:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ab705f8-675b-4626-9485-2b62db4c4112","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:60002","PortSpecifier":{"PortValue":60002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2ab705f8-675b-4626-9485-2b62db4c4112","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-11T08:25:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ab705f8-675b-4626-9485-2b62db4c4112","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:60002","PortSpecifier":{"PortValue":60002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783758317,"nanos":216282911},"http":{"id":"2ab705f8-675b-4626-9485-2b62db4c4112","method":"POST","headers":{":authority":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:25:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2ab705f8-675b-4626-9485-2b62db4c4112","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-11T08:25:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2ab705f8-675b-4626-9485-2b62db4c4112","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"]}} {"level":"debug","ts":"2026-07-11T08:25:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2ab705f8-675b-4626-9485-2b62db4c4112","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:25:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ab705f8-675b-4626-9485-2b62db4c4112","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:25:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ab705f8-675b-4626-9485-2b62db4c4112","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:25:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ab705f8-675b-4626-9485-2b62db4c4112","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f178a6/rate-test-model-f178a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:25:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2ab705f8-675b-4626-9485-2b62db4c4112","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-11T08:25:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ab705f8-675b-4626-9485-2b62db4c4112","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-11T08:25:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ab705f8-675b-4626-9485-2b62db4c4112","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-11T08:25:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ab705f8-675b-4626-9485-2b62db4c4112","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-11T08:25:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ab705f8-675b-4626-9485-2b62db4c4112","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-11T08:25:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fba1b924-0985-43e6-8e36-c968ab9de8e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:55936","PortSpecifier":{"PortValue":55936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fba1b924-0985-43e6-8e36-c968ab9de8e9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-11T08:25:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fba1b924-0985-43e6-8e36-c968ab9de8e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:55936","PortSpecifier":{"PortValue":55936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783758317,"nanos":262025459},"http":{"id":"fba1b924-0985-43e6-8e36-c968ab9de8e9","method":"POST","headers":{":authority":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:25:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fba1b924-0985-43e6-8e36-c968ab9de8e9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-11T08:25:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fba1b924-0985-43e6-8e36-c968ab9de8e9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"]}} {"level":"debug","ts":"2026-07-11T08:25:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fba1b924-0985-43e6-8e36-c968ab9de8e9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"06d1b5d9d009d5f26f906ed7698c8f7a0c3d74c322eab01f6b334398272b088a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:25:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fba1b924-0985-43e6-8e36-c968ab9de8e9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:25:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fba1b924-0985-43e6-8e36-c968ab9de8e9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:25:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fba1b924-0985-43e6-8e36-c968ab9de8e9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-12fff0/rate-test-model-12fff0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:25:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fba1b924-0985-43e6-8e36-c968ab9de8e9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-11T08:25:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fba1b924-0985-43e6-8e36-c968ab9de8e9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-11T08:25:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fba1b924-0985-43e6-8e36-c968ab9de8e9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-11T08:25:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fba1b924-0985-43e6-8e36-c968ab9de8e9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-11T08:25:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fba1b924-0985-43e6-8e36-c968ab9de8e9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-11T08:25:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15bc7c38-44c5-417c-af3b-b84c6604211f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:60016","PortSpecifier":{"PortValue":60016}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"15bc7c38-44c5-417c-af3b-b84c6604211f","method":"POST","path":"/ai-tenant-e2e-shared-a-f178a6/rate-test-model-f178a6/v1/completions","host":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-11T08:25:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15bc7c38-44c5-417c-af3b-b84c6604211f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:60016","PortSpecifier":{"PortValue":60016}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783758317,"nanos":296856352},"http":{"id":"15bc7c38-44c5-417c-af3b-b84c6604211f","method":"POST","headers":{":authority":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f178a6/rate-test-model-f178a6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:25:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"15bc7c38-44c5-417c-af3b-b84c6604211f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HXuWSC6bJhWj15oi_WzBffAdFruRxg6M27tiI0pT9VStlYeghiI7rTxk1GqA"} {"level":"debug","ts":"2026-07-11T08:25:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"15bc7c38-44c5-417c-af3b-b84c6604211f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f178a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HXuWSC6bJhWj15oi_WzBffAdFruRxg6M27tiI0pT9VStlYeghiI7rTxk1GqA\"}"} {"level":"debug","ts":"2026-07-11T08:25:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"15bc7c38-44c5-417c-af3b-b84c6604211f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f178a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ffc66d71-ba53-448b-bfbf-99c1b2ff7580","keyName":"e2e-rate-a-f19b0b","subscription":"e2e-rate-iso-a-f19b0b","tenant":"e2e-shared-a-f178a6","userId":"ffc66d71-ba53-448b-bfbf-99c1b2ff7580","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-11T08:25:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"15bc7c38-44c5-417c-af3b-b84c6604211f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f178a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f178a6/rate-test-model-f178a6\",\"requestedSubscription\":\"e2e-rate-iso-a-f19b0b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-11T08:25:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"15bc7c38-44c5-417c-af3b-b84c6604211f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f178a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f178a6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f19b0b","namespace":"ai-tenant-e2e-shared-a-f178a6","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-11T08:25:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"15bc7c38-44c5-417c-af3b-b84c6604211f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:25:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15bc7c38-44c5-417c-af3b-b84c6604211f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:25:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15bc7c38-44c5-417c-af3b-b84c6604211f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:25:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15bc7c38-44c5-417c-af3b-b84c6604211f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:25:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15bc7c38-44c5-417c-af3b-b84c6604211f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f178a6/rate-test-model-f178a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:25:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15bc7c38-44c5-417c-af3b-b84c6604211f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-11T08:25:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15bc7c38-44c5-417c-af3b-b84c6604211f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f19b0b"} {"level":"debug","ts":"2026-07-11T08:25:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15bc7c38-44c5-417c-af3b-b84c6604211f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-11T08:25:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15bc7c38-44c5-417c-af3b-b84c6604211f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ffc66d71-ba53-448b-bfbf-99c1b2ff7580","keyName":"e2e-rate-a-f19b0b","selected_subscription":"e2e-rate-iso-a-f19b0b","selected_subscription_key":"ai-tenant-e2e-shared-a-f178a6/e2e-rate-iso-a-f19b0b@ai-tenant-e2e-shared-a-f178a6/rate-test-model-f178a6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f178a6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f19b0b","namespace":"ai-tenant-e2e-shared-a-f178a6","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-11T08:25:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15bc7c38-44c5-417c-af3b-b84c6604211f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-11T08:25:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15bc7c38-44c5-417c-af3b-b84c6604211f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-11T08:25:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d24bc7ce-6572-4195-9ac3-36d6fb45e258","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:60020","PortSpecifier":{"PortValue":60020}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d24bc7ce-6572-4195-9ac3-36d6fb45e258","method":"POST","path":"/ai-tenant-e2e-shared-a-f178a6/rate-test-model-f178a6/v1/completions","host":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-11T08:25:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d24bc7ce-6572-4195-9ac3-36d6fb45e258","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:60020","PortSpecifier":{"PortValue":60020}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783758318,"nanos":342283504},"http":{"id":"d24bc7ce-6572-4195-9ac3-36d6fb45e258","method":"POST","headers":{":authority":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f178a6/rate-test-model-f178a6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:25:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d24bc7ce-6572-4195-9ac3-36d6fb45e258","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HXuWSC6bJhWj15oi_WzBffAdFruRxg6M27tiI0pT9VStlYeghiI7rTxk1GqA"} {"level":"debug","ts":"2026-07-11T08:25:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d24bc7ce-6572-4195-9ac3-36d6fb45e258","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f178a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HXuWSC6bJhWj15oi_WzBffAdFruRxg6M27tiI0pT9VStlYeghiI7rTxk1GqA\"}"} {"level":"debug","ts":"2026-07-11T08:25:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d24bc7ce-6572-4195-9ac3-36d6fb45e258","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f178a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ffc66d71-ba53-448b-bfbf-99c1b2ff7580","keyName":"e2e-rate-a-f19b0b","subscription":"e2e-rate-iso-a-f19b0b","tenant":"e2e-shared-a-f178a6","userId":"ffc66d71-ba53-448b-bfbf-99c1b2ff7580","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-11T08:25:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d24bc7ce-6572-4195-9ac3-36d6fb45e258","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f178a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f178a6/rate-test-model-f178a6\",\"requestedSubscription\":\"e2e-rate-iso-a-f19b0b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-11T08:25:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d24bc7ce-6572-4195-9ac3-36d6fb45e258","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f178a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f178a6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f19b0b","namespace":"ai-tenant-e2e-shared-a-f178a6","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-11T08:25:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d24bc7ce-6572-4195-9ac3-36d6fb45e258","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:25:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d24bc7ce-6572-4195-9ac3-36d6fb45e258","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:25:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d24bc7ce-6572-4195-9ac3-36d6fb45e258","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:25:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d24bc7ce-6572-4195-9ac3-36d6fb45e258","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:25:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d24bc7ce-6572-4195-9ac3-36d6fb45e258","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f178a6/rate-test-model-f178a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:25:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d24bc7ce-6572-4195-9ac3-36d6fb45e258","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-11T08:25:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d24bc7ce-6572-4195-9ac3-36d6fb45e258","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f19b0b"} {"level":"debug","ts":"2026-07-11T08:25:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d24bc7ce-6572-4195-9ac3-36d6fb45e258","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-11T08:25:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d24bc7ce-6572-4195-9ac3-36d6fb45e258","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ffc66d71-ba53-448b-bfbf-99c1b2ff7580","keyName":"e2e-rate-a-f19b0b","selected_subscription":"e2e-rate-iso-a-f19b0b","selected_subscription_key":"ai-tenant-e2e-shared-a-f178a6/e2e-rate-iso-a-f19b0b@ai-tenant-e2e-shared-a-f178a6/rate-test-model-f178a6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f178a6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f19b0b","namespace":"ai-tenant-e2e-shared-a-f178a6","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-11T08:25:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d24bc7ce-6572-4195-9ac3-36d6fb45e258","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-11T08:25:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d24bc7ce-6572-4195-9ac3-36d6fb45e258","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-11T08:25:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"742c17cb-f9e9-48b9-8f4f-52e7a297634c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:58020","PortSpecifier":{"PortValue":58020}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"742c17cb-f9e9-48b9-8f4f-52e7a297634c","method":"POST","path":"/ai-tenant-e2e-shared-a-f178a6/rate-test-model-f178a6/v1/completions","host":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-11T08:25:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"742c17cb-f9e9-48b9-8f4f-52e7a297634c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:58020","PortSpecifier":{"PortValue":58020}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783758319,"nanos":378196636},"http":{"id":"742c17cb-f9e9-48b9-8f4f-52e7a297634c","method":"POST","headers":{":authority":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f178a6/rate-test-model-f178a6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:25:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"742c17cb-f9e9-48b9-8f4f-52e7a297634c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HXuWSC6bJhWj15oi_WzBffAdFruRxg6M27tiI0pT9VStlYeghiI7rTxk1GqA"} {"level":"debug","ts":"2026-07-11T08:25:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"742c17cb-f9e9-48b9-8f4f-52e7a297634c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f178a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HXuWSC6bJhWj15oi_WzBffAdFruRxg6M27tiI0pT9VStlYeghiI7rTxk1GqA\"}"} {"level":"debug","ts":"2026-07-11T08:25:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"742c17cb-f9e9-48b9-8f4f-52e7a297634c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f178a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ffc66d71-ba53-448b-bfbf-99c1b2ff7580","keyName":"e2e-rate-a-f19b0b","subscription":"e2e-rate-iso-a-f19b0b","tenant":"e2e-shared-a-f178a6","userId":"ffc66d71-ba53-448b-bfbf-99c1b2ff7580","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-11T08:25:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"742c17cb-f9e9-48b9-8f4f-52e7a297634c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f178a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f178a6/rate-test-model-f178a6\",\"requestedSubscription\":\"e2e-rate-iso-a-f19b0b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-11T08:25:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"742c17cb-f9e9-48b9-8f4f-52e7a297634c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f178a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f178a6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f19b0b","namespace":"ai-tenant-e2e-shared-a-f178a6","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-11T08:25:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"742c17cb-f9e9-48b9-8f4f-52e7a297634c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:25:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"742c17cb-f9e9-48b9-8f4f-52e7a297634c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:25:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"742c17cb-f9e9-48b9-8f4f-52e7a297634c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:25:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"742c17cb-f9e9-48b9-8f4f-52e7a297634c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f178a6/rate-test-model-f178a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:25:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"742c17cb-f9e9-48b9-8f4f-52e7a297634c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:25:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"742c17cb-f9e9-48b9-8f4f-52e7a297634c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-11T08:25:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"742c17cb-f9e9-48b9-8f4f-52e7a297634c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f19b0b"} {"level":"debug","ts":"2026-07-11T08:25:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"742c17cb-f9e9-48b9-8f4f-52e7a297634c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-11T08:25:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"742c17cb-f9e9-48b9-8f4f-52e7a297634c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ffc66d71-ba53-448b-bfbf-99c1b2ff7580","keyName":"e2e-rate-a-f19b0b","selected_subscription":"e2e-rate-iso-a-f19b0b","selected_subscription_key":"ai-tenant-e2e-shared-a-f178a6/e2e-rate-iso-a-f19b0b@ai-tenant-e2e-shared-a-f178a6/rate-test-model-f178a6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f178a6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f19b0b","namespace":"ai-tenant-e2e-shared-a-f178a6","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-11T08:25:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"742c17cb-f9e9-48b9-8f4f-52e7a297634c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-11T08:25:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"742c17cb-f9e9-48b9-8f4f-52e7a297634c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3bed35f-928c-4ebe-a0c6-8f95df61c63e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:55368","PortSpecifier":{"PortValue":55368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e3bed35f-928c-4ebe-a0c6-8f95df61c63e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3bed35f-928c-4ebe-a0c6-8f95df61c63e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:55368","PortSpecifier":{"PortValue":55368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783758336,"nanos":407196311},"http":{"id":"e3bed35f-928c-4ebe-a0c6-8f95df61c63e","method":"POST","headers":{":authority":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e3bed35f-928c-4ebe-a0c6-8f95df61c63e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e3bed35f-928c-4ebe-a0c6-8f95df61c63e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"]}} {"level":"debug","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e3bed35f-928c-4ebe-a0c6-8f95df61c63e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3bed35f-928c-4ebe-a0c6-8f95df61c63e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3bed35f-928c-4ebe-a0c6-8f95df61c63e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3bed35f-928c-4ebe-a0c6-8f95df61c63e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f178a6/rate-test-model-f178a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e3bed35f-928c-4ebe-a0c6-8f95df61c63e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3bed35f-928c-4ebe-a0c6-8f95df61c63e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3bed35f-928c-4ebe-a0c6-8f95df61c63e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3bed35f-928c-4ebe-a0c6-8f95df61c63e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3bed35f-928c-4ebe-a0c6-8f95df61c63e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8190b79f-cd22-4c32-a939-ad1d96e8d506","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:45112","PortSpecifier":{"PortValue":45112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8190b79f-cd22-4c32-a939-ad1d96e8d506","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8190b79f-cd22-4c32-a939-ad1d96e8d506","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:45112","PortSpecifier":{"PortValue":45112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783758336,"nanos":440977115},"http":{"id":"8190b79f-cd22-4c32-a939-ad1d96e8d506","method":"POST","headers":{":authority":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8190b79f-cd22-4c32-a939-ad1d96e8d506","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8190b79f-cd22-4c32-a939-ad1d96e8d506","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"]}} {"level":"debug","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8190b79f-cd22-4c32-a939-ad1d96e8d506","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d020ef5edfc2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=195f846c-ee22-4373-9788-4de56b876f14"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1d01cee5-e78a-40dc-963b-63d1bf61e4c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"06d1b5d9d009d5f26f906ed7698c8f7a0c3d74c322eab01f6b334398272b088a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8190b79f-cd22-4c32-a939-ad1d96e8d506","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8190b79f-cd22-4c32-a939-ad1d96e8d506","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8190b79f-cd22-4c32-a939-ad1d96e8d506","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-12fff0/rate-test-model-12fff0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8190b79f-cd22-4c32-a939-ad1d96e8d506","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth.authpipeline","msg":"skipping config","request id":"8190b79f-cd22-4c32-a939-ad1d96e8d506","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"reason":"context canceled"} {"level":"debug","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth.authpipeline","msg":"skipping config","request id":"8190b79f-cd22-4c32-a939-ad1d96e8d506","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"reason":"context canceled"} {"level":"debug","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth.authpipeline","msg":"skipping config","request id":"8190b79f-cd22-4c32-a939-ad1d96e8d506","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"reason":"context canceled"} {"level":"debug","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8190b79f-cd22-4c32-a939-ad1d96e8d506","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8190b79f-cd22-4c32-a939-ad1d96e8d506","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8190b79f-cd22-4c32-a939-ad1d96e8d506","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8190b79f-cd22-4c32-a939-ad1d96e8d506","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52d3f1bb-f5f8-44cb-a273-4fe388a37766","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:55384","PortSpecifier":{"PortValue":55384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"52d3f1bb-f5f8-44cb-a273-4fe388a37766","method":"POST","path":"/ai-tenant-e2e-shared-a-f178a6/rate-test-model-f178a6/v1/completions","host":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52d3f1bb-f5f8-44cb-a273-4fe388a37766","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:55384","PortSpecifier":{"PortValue":55384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783758336,"nanos":477382268},"http":{"id":"52d3f1bb-f5f8-44cb-a273-4fe388a37766","method":"POST","headers":{":authority":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f178a6/rate-test-model-f178a6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"52d3f1bb-f5f8-44cb-a273-4fe388a37766","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1aULj0FYe55GGU3wg_W4axaiB99L1ksJMmmgjLi3WKvfDn3KBbpmFBdHREWDd"} {"level":"debug","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"52d3f1bb-f5f8-44cb-a273-4fe388a37766","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f178a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1aULj0FYe55GGU3wg_W4axaiB99L1ksJMmmgjLi3WKvfDn3KBbpmFBdHREWDd\"}"} {"level":"debug","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"52d3f1bb-f5f8-44cb-a273-4fe388a37766","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f178a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e0fc5d80-66e0-460c-b67e-dd1b178b866e","keyName":"e2e-rate-a-bff9f0","subscription":"e2e-rate-iso-a-bff9f0","tenant":"e2e-shared-a-f178a6","userId":"e0fc5d80-66e0-460c-b67e-dd1b178b866e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"52d3f1bb-f5f8-44cb-a273-4fe388a37766","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f178a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f178a6/rate-test-model-f178a6\",\"requestedSubscription\":\"e2e-rate-iso-a-bff9f0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"52d3f1bb-f5f8-44cb-a273-4fe388a37766","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f178a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f178a6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bff9f0","namespace":"ai-tenant-e2e-shared-a-f178a6","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"52d3f1bb-f5f8-44cb-a273-4fe388a37766","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52d3f1bb-f5f8-44cb-a273-4fe388a37766","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52d3f1bb-f5f8-44cb-a273-4fe388a37766","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52d3f1bb-f5f8-44cb-a273-4fe388a37766","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52d3f1bb-f5f8-44cb-a273-4fe388a37766","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f178a6/rate-test-model-f178a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52d3f1bb-f5f8-44cb-a273-4fe388a37766","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52d3f1bb-f5f8-44cb-a273-4fe388a37766","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bff9f0"} {"level":"debug","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52d3f1bb-f5f8-44cb-a273-4fe388a37766","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52d3f1bb-f5f8-44cb-a273-4fe388a37766","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e0fc5d80-66e0-460c-b67e-dd1b178b866e","keyName":"e2e-rate-a-bff9f0","selected_subscription":"e2e-rate-iso-a-bff9f0","selected_subscription_key":"ai-tenant-e2e-shared-a-f178a6/e2e-rate-iso-a-bff9f0@ai-tenant-e2e-shared-a-f178a6/rate-test-model-f178a6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f178a6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bff9f0","namespace":"ai-tenant-e2e-shared-a-f178a6","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52d3f1bb-f5f8-44cb-a273-4fe388a37766","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-11T08:25:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52d3f1bb-f5f8-44cb-a273-4fe388a37766","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-11T08:25:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f594697-b25c-42b9-a3fd-b3d93f5efe74","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:55394","PortSpecifier":{"PortValue":55394}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5f594697-b25c-42b9-a3fd-b3d93f5efe74","method":"POST","path":"/ai-tenant-e2e-shared-a-f178a6/rate-test-model-f178a6/v1/completions","host":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-11T08:25:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f594697-b25c-42b9-a3fd-b3d93f5efe74","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:55394","PortSpecifier":{"PortValue":55394}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783758337,"nanos":517034531},"http":{"id":"5f594697-b25c-42b9-a3fd-b3d93f5efe74","method":"POST","headers":{":authority":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f178a6/rate-test-model-f178a6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:25:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5f594697-b25c-42b9-a3fd-b3d93f5efe74","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1aULj0FYe55GGU3wg_W4axaiB99L1ksJMmmgjLi3WKvfDn3KBbpmFBdHREWDd"} {"level":"debug","ts":"2026-07-11T08:25:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5f594697-b25c-42b9-a3fd-b3d93f5efe74","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f178a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1aULj0FYe55GGU3wg_W4axaiB99L1ksJMmmgjLi3WKvfDn3KBbpmFBdHREWDd\"}"} {"level":"debug","ts":"2026-07-11T08:25:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5f594697-b25c-42b9-a3fd-b3d93f5efe74","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f178a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e0fc5d80-66e0-460c-b67e-dd1b178b866e","keyName":"e2e-rate-a-bff9f0","subscription":"e2e-rate-iso-a-bff9f0","tenant":"e2e-shared-a-f178a6","userId":"e0fc5d80-66e0-460c-b67e-dd1b178b866e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-11T08:25:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5f594697-b25c-42b9-a3fd-b3d93f5efe74","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f178a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f178a6/rate-test-model-f178a6\",\"requestedSubscription\":\"e2e-rate-iso-a-bff9f0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-11T08:25:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5f594697-b25c-42b9-a3fd-b3d93f5efe74","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f178a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f178a6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bff9f0","namespace":"ai-tenant-e2e-shared-a-f178a6","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-11T08:25:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5f594697-b25c-42b9-a3fd-b3d93f5efe74","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:25:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f594697-b25c-42b9-a3fd-b3d93f5efe74","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:25:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f594697-b25c-42b9-a3fd-b3d93f5efe74","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:25:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f594697-b25c-42b9-a3fd-b3d93f5efe74","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f178a6/rate-test-model-f178a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:25:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f594697-b25c-42b9-a3fd-b3d93f5efe74","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:25:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f594697-b25c-42b9-a3fd-b3d93f5efe74","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-11T08:25:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f594697-b25c-42b9-a3fd-b3d93f5efe74","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-11T08:25:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f594697-b25c-42b9-a3fd-b3d93f5efe74","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bff9f0"} {"level":"debug","ts":"2026-07-11T08:25:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f594697-b25c-42b9-a3fd-b3d93f5efe74","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e0fc5d80-66e0-460c-b67e-dd1b178b866e","keyName":"e2e-rate-a-bff9f0","selected_subscription":"e2e-rate-iso-a-bff9f0","selected_subscription_key":"ai-tenant-e2e-shared-a-f178a6/e2e-rate-iso-a-bff9f0@ai-tenant-e2e-shared-a-f178a6/rate-test-model-f178a6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f178a6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bff9f0","namespace":"ai-tenant-e2e-shared-a-f178a6","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-11T08:25:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f594697-b25c-42b9-a3fd-b3d93f5efe74","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-11T08:25:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f594697-b25c-42b9-a3fd-b3d93f5efe74","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-11T08:25:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05322889-2677-473c-b18e-f5a0f1613241","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:55398","PortSpecifier":{"PortValue":55398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"05322889-2677-473c-b18e-f5a0f1613241","method":"POST","path":"/ai-tenant-e2e-shared-a-f178a6/rate-test-model-f178a6/v1/completions","host":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-11T08:25:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05322889-2677-473c-b18e-f5a0f1613241","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:55398","PortSpecifier":{"PortValue":55398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783758338,"nanos":553532495},"http":{"id":"05322889-2677-473c-b18e-f5a0f1613241","method":"POST","headers":{":authority":"e2e-shared-a-f178a6.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f178a6/rate-test-model-f178a6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:25:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"05322889-2677-473c-b18e-f5a0f1613241","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1aULj0FYe55GGU3wg_W4axaiB99L1ksJMmmgjLi3WKvfDn3KBbpmFBdHREWDd"} {"level":"debug","ts":"2026-07-11T08:25:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"05322889-2677-473c-b18e-f5a0f1613241","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f178a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1aULj0FYe55GGU3wg_W4axaiB99L1ksJMmmgjLi3WKvfDn3KBbpmFBdHREWDd\"}"} {"level":"debug","ts":"2026-07-11T08:25:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"05322889-2677-473c-b18e-f5a0f1613241","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f178a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e0fc5d80-66e0-460c-b67e-dd1b178b866e","keyName":"e2e-rate-a-bff9f0","subscription":"e2e-rate-iso-a-bff9f0","tenant":"e2e-shared-a-f178a6","userId":"e0fc5d80-66e0-460c-b67e-dd1b178b866e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-11T08:25:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"05322889-2677-473c-b18e-f5a0f1613241","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f178a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f178a6/rate-test-model-f178a6\",\"requestedSubscription\":\"e2e-rate-iso-a-bff9f0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-11T08:25:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"05322889-2677-473c-b18e-f5a0f1613241","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f178a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f178a6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bff9f0","namespace":"ai-tenant-e2e-shared-a-f178a6","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-11T08:25:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"05322889-2677-473c-b18e-f5a0f1613241","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:25:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05322889-2677-473c-b18e-f5a0f1613241","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:25:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05322889-2677-473c-b18e-f5a0f1613241","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:25:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05322889-2677-473c-b18e-f5a0f1613241","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f178a6/rate-test-model-f178a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:25:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05322889-2677-473c-b18e-f5a0f1613241","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:25:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05322889-2677-473c-b18e-f5a0f1613241","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-11T08:25:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05322889-2677-473c-b18e-f5a0f1613241","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-11T08:25:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05322889-2677-473c-b18e-f5a0f1613241","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bff9f0"} {"level":"debug","ts":"2026-07-11T08:25:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05322889-2677-473c-b18e-f5a0f1613241","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e0fc5d80-66e0-460c-b67e-dd1b178b866e","keyName":"e2e-rate-a-bff9f0","selected_subscription":"e2e-rate-iso-a-bff9f0","selected_subscription_key":"ai-tenant-e2e-shared-a-f178a6/e2e-rate-iso-a-bff9f0@ai-tenant-e2e-shared-a-f178a6/rate-test-model-f178a6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f178a6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bff9f0","namespace":"ai-tenant-e2e-shared-a-f178a6","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-11T08:25:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05322889-2677-473c-b18e-f5a0f1613241","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-11T08:25:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05322889-2677-473c-b18e-f5a0f1613241","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-11T08:25:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99481839-738c-4c7e-8985-01a26003a362","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:45120","PortSpecifier":{"PortValue":45120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"99481839-738c-4c7e-8985-01a26003a362","method":"POST","path":"/ai-tenant-e2e-shared-b-12fff0/rate-test-model-12fff0/v1/completions","host":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-11T08:25:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99481839-738c-4c7e-8985-01a26003a362","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:45120","PortSpecifier":{"PortValue":45120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783758338,"nanos":587196580},"http":{"id":"99481839-738c-4c7e-8985-01a26003a362","method":"POST","headers":{":authority":"e2e-shared-b-12fff0.apps.64947062-dd0c-4089-8c38-d020ef5edfc2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-12fff0/rate-test-model-12fff0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:25:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"99481839-738c-4c7e-8985-01a26003a362","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-mNouKQ98pv3k1Sxo_dfn9zQDAxOu8b0g2tKFPTJFlTnjVvnhkuTWdhknm0ry"} {"level":"debug","ts":"2026-07-11T08:25:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"99481839-738c-4c7e-8985-01a26003a362","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-12fff0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-mNouKQ98pv3k1Sxo_dfn9zQDAxOu8b0g2tKFPTJFlTnjVvnhkuTWdhknm0ry\"}"} {"level":"debug","ts":"2026-07-11T08:25:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"99481839-738c-4c7e-8985-01a26003a362","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-12fff0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"76ad5494-44e9-4c62-91d6-477bc66f9d2a","keyName":"e2e-rate-b-bff9f0","subscription":"e2e-rate-iso-b-bff9f0","tenant":"e2e-shared-b-12fff0","userId":"76ad5494-44e9-4c62-91d6-477bc66f9d2a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-11T08:25:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"99481839-738c-4c7e-8985-01a26003a362","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-12fff0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-12fff0/rate-test-model-12fff0\",\"requestedSubscription\":\"e2e-rate-iso-b-bff9f0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-11T08:25:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"99481839-738c-4c7e-8985-01a26003a362","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-12fff0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-12fff0","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-bff9f0","namespace":"ai-tenant-e2e-shared-b-12fff0","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-11T08:25:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"99481839-738c-4c7e-8985-01a26003a362","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-11T08:25:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99481839-738c-4c7e-8985-01a26003a362","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:25:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99481839-738c-4c7e-8985-01a26003a362","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:25:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99481839-738c-4c7e-8985-01a26003a362","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-12fff0/rate-test-model-12fff0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:25:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99481839-738c-4c7e-8985-01a26003a362","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-11T08:25:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99481839-738c-4c7e-8985-01a26003a362","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-11T08:25:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99481839-738c-4c7e-8985-01a26003a362","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-11T08:25:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99481839-738c-4c7e-8985-01a26003a362","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-bff9f0"} {"level":"debug","ts":"2026-07-11T08:25:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99481839-738c-4c7e-8985-01a26003a362","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"76ad5494-44e9-4c62-91d6-477bc66f9d2a","keyName":"e2e-rate-b-bff9f0","selected_subscription":"e2e-rate-iso-b-bff9f0","selected_subscription_key":"ai-tenant-e2e-shared-b-12fff0/e2e-rate-iso-b-bff9f0@ai-tenant-e2e-shared-b-12fff0/rate-test-model-12fff0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-12fff0","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-bff9f0","namespace":"ai-tenant-e2e-shared-b-12fff0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-11T08:25:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99481839-738c-4c7e-8985-01a26003a362","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-11T08:25:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99481839-738c-4c7e-8985-01a26003a362","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-11T08:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b771eff94892b6c3feb17501a7417bae971be17e4486e9b36698ed6f290afca"} {"level":"info","ts":"2026-07-11T08:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/851cb3cdfd33dfa64dfb9f282eb4b511d34d67b8df62441491b175c5e25215f9"} {"level":"info","ts":"2026-07-11T08:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b696f94cf757b933f1c74316b829a4fbcd1b54658795f23557f2fdb61e599036"} {"level":"info","ts":"2026-07-11T08:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b4389bde531b35dfd7998e2255a55e43f33351bd316715bfad193d9692d478f"} {"level":"info","ts":"2026-07-11T08:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b0e38d5dadd84288104e62ac194df0fcf4058855496d490c520fedbed0405b4"} {"level":"info","ts":"2026-07-11T08:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4a7f6b4a0a7e9ebcaadbf44b92f8c25fccc7830b89a2305464391cc6a6de67a"} {"level":"info","ts":"2026-07-11T08:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7068a92eab7348f3dd46d2b157c931bd4b0c77a409c1ddf4c2d1bb690bda1a7"} {"level":"info","ts":"2026-07-11T08:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1dd571850685c9b504c87f198352808ea1ee6284730319b491df249e96d9fdd"} {"level":"info","ts":"2026-07-11T08:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea11024e9de5217ccdc5f5fd0c2cc7262225da35f47dd5487775ad2955346c9e"} {"level":"info","ts":"2026-07-11T08:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d865c6b541b5de049970b989b66394373852a245295035aed1a556729d6fdcd"} {"level":"info","ts":"2026-07-11T08:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a22cc74d4694f493e153226b5db544ed33fdcf19ac371d539d756a87d3d3ebe"} {"level":"info","ts":"2026-07-11T08:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28f67e0c30b17c92b7640887b26197269f9edd12c254ddc3975dc753e18e2a66"} {"level":"info","ts":"2026-07-11T08:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db3c3428a3646588f31b93797b7a13b2c07e740187fbd9ee86c4e6c01e84491b"} {"level":"info","ts":"2026-07-11T08:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91a236f4d760ea12c4641781eb285c855b8109c5bc1ed56f324291a491cef9d6"} {"level":"info","ts":"2026-07-11T08:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2adcf764fb3e9520cc4b13de26fe0e31fd5b9124854650c9de4d5fb13cf81073"} {"level":"info","ts":"2026-07-11T08:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c77ca88036a287c612cffb23b581a2cd529a80e18795bf4559a70d806b1cda76"} {"level":"info","ts":"2026-07-11T08:26:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad2f6da9f56fa82d96f5c8ae9cc424bcbb47ea2f5e7cf3d74bd49cfabd55d4e2"} {"level":"info","ts":"2026-07-11T08:26:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a52aea15035bd0b5c7f711f598017439b716a0965d0636518e42dac4f8104f6a"} {"level":"info","ts":"2026-07-11T08:26:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/952c617485d4237b01540c50d973c5c4f68c0a903fac4ff73458d4e2e11800a1"} {"level":"info","ts":"2026-07-11T08:26:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d32e381223a8aaf57d72e7e28ed37b63508f7d271e7f1c7c8a2ebfc3cdf082f3"} {"level":"info","ts":"2026-07-11T08:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1227cafbeba22680bf039805f5323b5decbdef632326f41e7a5f37e4032b54c5"} {"level":"info","ts":"2026-07-11T08:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/06d1b5d9d009d5f26f906ed7698c8f7a0c3d74c322eab01f6b334398272b088a"} {"level":"info","ts":"2026-07-11T08:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/853646085dd3ad6f1705cfb7b03650a1570d27f7df7276f9d6cedc2325fc080c"} {"level":"info","ts":"2026-07-11T08:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e38fd9ee1b38b02f47417ef7d0628d20ae6a21769dd8d2e209f479b0cea50d9a"}