--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-21T14:25:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df9d2e6a3936f77fc94f22857fab5df0454e6d906f4e336f7bfc241dca7efb89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:25:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:25:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df9d2e6a3936f77fc94f22857fab5df0454e6d906f4e336f7bfc241dca7efb89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df9d2e6a3936f77fc94f22857fab5df0454e6d906f4e336f7bfc241dca7efb89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df9d2e6a3936f77fc94f22857fab5df0454e6d906f4e336f7bfc241dca7efb89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df9d2e6a3936f77fc94f22857fab5df0454e6d906f4e336f7bfc241dca7efb89"} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9"} {"level":"error","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9"} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0"} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0"} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9"} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7"} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0"} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7"} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88"} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88"} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88"} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88"} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627"} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627"} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88"} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde674c75977e371c82ca47169f7e007ee8e6042104dfc7db5efcd6469664324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde674c75977e371c82ca47169f7e007ee8e6042104dfc7db5efcd6469664324","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04cc0485cc9d8c60d45d6ae3c996552e5c2f3b054b08a35ec2482746b27a83cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde674c75977e371c82ca47169f7e007ee8e6042104dfc7db5efcd6469664324"} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04cc0485cc9d8c60d45d6ae3c996552e5c2f3b054b08a35ec2482746b27a83cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde674c75977e371c82ca47169f7e007ee8e6042104dfc7db5efcd6469664324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cde674c75977e371c82ca47169f7e007ee8e6042104dfc7db5efcd6469664324"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04cc0485cc9d8c60d45d6ae3c996552e5c2f3b054b08a35ec2482746b27a83cc"} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde674c75977e371c82ca47169f7e007ee8e6042104dfc7db5efcd6469664324","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04cc0485cc9d8c60d45d6ae3c996552e5c2f3b054b08a35ec2482746b27a83cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04cc0485cc9d8c60d45d6ae3c996552e5c2f3b054b08a35ec2482746b27a83cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04cc0485cc9d8c60d45d6ae3c996552e5c2f3b054b08a35ec2482746b27a83cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde674c75977e371c82ca47169f7e007ee8e6042104dfc7db5efcd6469664324"} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde674c75977e371c82ca47169f7e007ee8e6042104dfc7db5efcd6469664324","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04cc0485cc9d8c60d45d6ae3c996552e5c2f3b054b08a35ec2482746b27a83cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04cc0485cc9d8c60d45d6ae3c996552e5c2f3b054b08a35ec2482746b27a83cc"} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04cc0485cc9d8c60d45d6ae3c996552e5c2f3b054b08a35ec2482746b27a83cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04cc0485cc9d8c60d45d6ae3c996552e5c2f3b054b08a35ec2482746b27a83cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04cc0485cc9d8c60d45d6ae3c996552e5c2f3b054b08a35ec2482746b27a83cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04cc0485cc9d8c60d45d6ae3c996552e5c2f3b054b08a35ec2482746b27a83cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde674c75977e371c82ca47169f7e007ee8e6042104dfc7db5efcd6469664324"} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04cc0485cc9d8c60d45d6ae3c996552e5c2f3b054b08a35ec2482746b27a83cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627"} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04cc0485cc9d8c60d45d6ae3c996552e5c2f3b054b08a35ec2482746b27a83cc"} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"} {"level":"debug","ts":"2026-07-21T14:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"} {"level":"debug","ts":"2026-07-21T14:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"} {"level":"debug","ts":"2026-07-21T14:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"} {"level":"debug","ts":"2026-07-21T14:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"} {"level":"debug","ts":"2026-07-21T14:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"} {"level":"debug","ts":"2026-07-21T14:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"} {"level":"debug","ts":"2026-07-21T14:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"} {"level":"debug","ts":"2026-07-21T14:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"} {"level":"debug","ts":"2026-07-21T14:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"} {"level":"debug","ts":"2026-07-21T14:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"} {"level":"info","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06f4335b-33d7-47a5-9d5a-37638462a18a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60672","PortSpecifier":{"PortValue":60672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"06f4335b-33d7-47a5-9d5a-37638462a18a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06f4335b-33d7-47a5-9d5a-37638462a18a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60672","PortSpecifier":{"PortValue":60672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784643929,"nanos":10269132},"http":{"id":"06f4335b-33d7-47a5-9d5a-37638462a18a","method":"POST","headers":{":authority":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"06f4335b-33d7-47a5-9d5a-37638462a18a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"06f4335b-33d7-47a5-9d5a-37638462a18a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c9d8e713-ec08-4892-a56e-7b129733ef25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=69bd14ba-7c3b-4214-abdc-648afc7bb592"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f501dc36bfbb"]}} {"level":"debug","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"06f4335b-33d7-47a5-9d5a-37638462a18a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f501dc36bfbb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=69bd14ba-7c3b-4214-abdc-648afc7bb592"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c9d8e713-ec08-4892-a56e-7b129733ef25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e8d0686a50e7d1402fdd8dd17bc7b97614fd40cbff4191fa210bb147ad2f45a6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06f4335b-33d7-47a5-9d5a-37638462a18a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06f4335b-33d7-47a5-9d5a-37638462a18a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06f4335b-33d7-47a5-9d5a-37638462a18a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-67be07/auth-test-model-67be07\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-67be07/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"06f4335b-33d7-47a5-9d5a-37638462a18a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06f4335b-33d7-47a5-9d5a-37638462a18a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06f4335b-33d7-47a5-9d5a-37638462a18a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06f4335b-33d7-47a5-9d5a-37638462a18a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06f4335b-33d7-47a5-9d5a-37638462a18a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05303c72-e6ff-44eb-8d70-623bf1e7507f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:51646","PortSpecifier":{"PortValue":51646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"05303c72-e6ff-44eb-8d70-623bf1e7507f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-52967c.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05303c72-e6ff-44eb-8d70-623bf1e7507f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:51646","PortSpecifier":{"PortValue":51646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784643929,"nanos":46918828},"http":{"id":"05303c72-e6ff-44eb-8d70-623bf1e7507f","method":"POST","headers":{":authority":"e2e-shared-b-52967c.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"05303c72-e6ff-44eb-8d70-623bf1e7507f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"05303c72-e6ff-44eb-8d70-623bf1e7507f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c9d8e713-ec08-4892-a56e-7b129733ef25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=69bd14ba-7c3b-4214-abdc-648afc7bb592"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f501dc36bfbb"]}} {"level":"debug","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"05303c72-e6ff-44eb-8d70-623bf1e7507f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f501dc36bfbb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=69bd14ba-7c3b-4214-abdc-648afc7bb592"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c9d8e713-ec08-4892-a56e-7b129733ef25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-52967c.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05303c72-e6ff-44eb-8d70-623bf1e7507f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05303c72-e6ff-44eb-8d70-623bf1e7507f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05303c72-e6ff-44eb-8d70-623bf1e7507f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-52967c/auth-test-model-52967c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-52967c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"05303c72-e6ff-44eb-8d70-623bf1e7507f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05303c72-e6ff-44eb-8d70-623bf1e7507f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05303c72-e6ff-44eb-8d70-623bf1e7507f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05303c72-e6ff-44eb-8d70-623bf1e7507f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05303c72-e6ff-44eb-8d70-623bf1e7507f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74c66156-83ae-4750-85f1-d6f0599f4b84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60676","PortSpecifier":{"PortValue":60676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"74c66156-83ae-4750-85f1-d6f0599f4b84","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74c66156-83ae-4750-85f1-d6f0599f4b84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60676","PortSpecifier":{"PortValue":60676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784643929,"nanos":86693800},"http":{"id":"74c66156-83ae-4750-85f1-d6f0599f4b84","method":"POST","headers":{":authority":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"74c66156-83ae-4750-85f1-d6f0599f4b84","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"74c66156-83ae-4750-85f1-d6f0599f4b84","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c9d8e713-ec08-4892-a56e-7b129733ef25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=69bd14ba-7c3b-4214-abdc-648afc7bb592"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f501dc36bfbb"]}} {"level":"debug","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"74c66156-83ae-4750-85f1-d6f0599f4b84","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f501dc36bfbb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=69bd14ba-7c3b-4214-abdc-648afc7bb592"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c9d8e713-ec08-4892-a56e-7b129733ef25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e8d0686a50e7d1402fdd8dd17bc7b97614fd40cbff4191fa210bb147ad2f45a6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74c66156-83ae-4750-85f1-d6f0599f4b84","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74c66156-83ae-4750-85f1-d6f0599f4b84","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74c66156-83ae-4750-85f1-d6f0599f4b84","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-67be07/auth-test-model-67be07\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-67be07/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"74c66156-83ae-4750-85f1-d6f0599f4b84","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74c66156-83ae-4750-85f1-d6f0599f4b84","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74c66156-83ae-4750-85f1-d6f0599f4b84","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74c66156-83ae-4750-85f1-d6f0599f4b84","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74c66156-83ae-4750-85f1-d6f0599f4b84","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa845f30-d23b-462f-af2c-fe68b7f92f3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:51654","PortSpecifier":{"PortValue":51654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fa845f30-d23b-462f-af2c-fe68b7f92f3f","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-52967c.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa845f30-d23b-462f-af2c-fe68b7f92f3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:51654","PortSpecifier":{"PortValue":51654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784643929,"nanos":123634782},"http":{"id":"fa845f30-d23b-462f-af2c-fe68b7f92f3f","method":"POST","headers":{":authority":"e2e-shared-b-52967c.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fa845f30-d23b-462f-af2c-fe68b7f92f3f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fa845f30-d23b-462f-af2c-fe68b7f92f3f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c9d8e713-ec08-4892-a56e-7b129733ef25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=69bd14ba-7c3b-4214-abdc-648afc7bb592"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f501dc36bfbb"]}} {"level":"debug","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fa845f30-d23b-462f-af2c-fe68b7f92f3f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f501dc36bfbb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=69bd14ba-7c3b-4214-abdc-648afc7bb592"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c9d8e713-ec08-4892-a56e-7b129733ef25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-52967c.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa845f30-d23b-462f-af2c-fe68b7f92f3f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa845f30-d23b-462f-af2c-fe68b7f92f3f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa845f30-d23b-462f-af2c-fe68b7f92f3f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-52967c/auth-test-model-52967c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-52967c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fa845f30-d23b-462f-af2c-fe68b7f92f3f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa845f30-d23b-462f-af2c-fe68b7f92f3f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa845f30-d23b-462f-af2c-fe68b7f92f3f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa845f30-d23b-462f-af2c-fe68b7f92f3f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T14:25:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa845f30-d23b-462f-af2c-fe68b7f92f3f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T14:25:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627"} {"level":"info","ts":"2026-07-21T14:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cde674c75977e371c82ca47169f7e007ee8e6042104dfc7db5efcd6469664324"} {"level":"info","ts":"2026-07-21T14:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9"} {"level":"info","ts":"2026-07-21T14:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7"} {"level":"info","ts":"2026-07-21T14:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0"} {"level":"info","ts":"2026-07-21T14:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df9d2e6a3936f77fc94f22857fab5df0454e6d906f4e336f7bfc241dca7efb89"} {"level":"info","ts":"2026-07-21T14:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20"} {"level":"info","ts":"2026-07-21T14:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04cc0485cc9d8c60d45d6ae3c996552e5c2f3b054b08a35ec2482746b27a83cc"} {"level":"info","ts":"2026-07-21T14:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cfe4c22f07c07cceb517f5768a7dd03c8caaa082911b9fb8f82f8fa428f54021"} {"level":"info","ts":"2026-07-21T14:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c4641506b522f109d169733866ef9066bab1402842913978a1cf33756d55ee5"} {"level":"info","ts":"2026-07-21T14:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88"} {"level":"info","ts":"2026-07-21T14:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"} {"level":"debug","ts":"2026-07-21T14:25:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df9d2e6a3936f77fc94f22857fab5df0454e6d906f4e336f7bfc241dca7efb89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df9d2e6a3936f77fc94f22857fab5df0454e6d906f4e336f7bfc241dca7efb89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df9d2e6a3936f77fc94f22857fab5df0454e6d906f4e336f7bfc241dca7efb89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df9d2e6a3936f77fc94f22857fab5df0454e6d906f4e336f7bfc241dca7efb89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df9d2e6a3936f77fc94f22857fab5df0454e6d906f4e336f7bfc241dca7efb89"} {"level":"debug","ts":"2026-07-21T14:25:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df9d2e6a3936f77fc94f22857fab5df0454e6d906f4e336f7bfc241dca7efb89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df9d2e6a3936f77fc94f22857fab5df0454e6d906f4e336f7bfc241dca7efb89"} {"level":"debug","ts":"2026-07-21T14:25:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df9d2e6a3936f77fc94f22857fab5df0454e6d906f4e336f7bfc241dca7efb89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:25:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:25:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df9d2e6a3936f77fc94f22857fab5df0454e6d906f4e336f7bfc241dca7efb89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df9d2e6a3936f77fc94f22857fab5df0454e6d906f4e336f7bfc241dca7efb89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df9d2e6a3936f77fc94f22857fab5df0454e6d906f4e336f7bfc241dca7efb89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df9d2e6a3936f77fc94f22857fab5df0454e6d906f4e336f7bfc241dca7efb89"} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde674c75977e371c82ca47169f7e007ee8e6042104dfc7db5efcd6469664324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde674c75977e371c82ca47169f7e007ee8e6042104dfc7db5efcd6469664324","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde674c75977e371c82ca47169f7e007ee8e6042104dfc7db5efcd6469664324","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde674c75977e371c82ca47169f7e007ee8e6042104dfc7db5efcd6469664324","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde674c75977e371c82ca47169f7e007ee8e6042104dfc7db5efcd6469664324"} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde674c75977e371c82ca47169f7e007ee8e6042104dfc7db5efcd6469664324","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde674c75977e371c82ca47169f7e007ee8e6042104dfc7db5efcd6469664324"} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde674c75977e371c82ca47169f7e007ee8e6042104dfc7db5efcd6469664324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cde674c75977e371c82ca47169f7e007ee8e6042104dfc7db5efcd6469664324"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde674c75977e371c82ca47169f7e007ee8e6042104dfc7db5efcd6469664324","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde674c75977e371c82ca47169f7e007ee8e6042104dfc7db5efcd6469664324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde674c75977e371c82ca47169f7e007ee8e6042104dfc7db5efcd6469664324","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde674c75977e371c82ca47169f7e007ee8e6042104dfc7db5efcd6469664324"} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88"} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde674c75977e371c82ca47169f7e007ee8e6042104dfc7db5efcd6469664324","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde674c75977e371c82ca47169f7e007ee8e6042104dfc7db5efcd6469664324"} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde674c75977e371c82ca47169f7e007ee8e6042104dfc7db5efcd6469664324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cde674c75977e371c82ca47169f7e007ee8e6042104dfc7db5efcd6469664324"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88"} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde674c75977e371c82ca47169f7e007ee8e6042104dfc7db5efcd6469664324","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88"} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627"} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde674c75977e371c82ca47169f7e007ee8e6042104dfc7db5efcd6469664324"} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde674c75977e371c82ca47169f7e007ee8e6042104dfc7db5efcd6469664324","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88"} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627"} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9"} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88"} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9"} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88"} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9"} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88"} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0"} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0"} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0"} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20"} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20"} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20"} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7"} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20"} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7"} {"level":"error","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20"} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7"} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20"} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:25:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7"} {"level":"info","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe4c22f07c07cceb517f5768a7dd03c8caaa082911b9fb8f82f8fa428f54021","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7"} {"level":"info","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfe4c22f07c07cceb517f5768a7dd03c8caaa082911b9fb8f82f8fa428f54021","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:25:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:25:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20"} {"level":"info","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe4c22f07c07cceb517f5768a7dd03c8caaa082911b9fb8f82f8fa428f54021","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfe4c22f07c07cceb517f5768a7dd03c8caaa082911b9fb8f82f8fa428f54021","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfe4c22f07c07cceb517f5768a7dd03c8caaa082911b9fb8f82f8fa428f54021","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfe4c22f07c07cceb517f5768a7dd03c8caaa082911b9fb8f82f8fa428f54021"} {"level":"debug","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe4c22f07c07cceb517f5768a7dd03c8caaa082911b9fb8f82f8fa428f54021","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:25:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:25:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cfe4c22f07c07cceb517f5768a7dd03c8caaa082911b9fb8f82f8fa428f54021"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfe4c22f07c07cceb517f5768a7dd03c8caaa082911b9fb8f82f8fa428f54021","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7"} {"level":"debug","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe4c22f07c07cceb517f5768a7dd03c8caaa082911b9fb8f82f8fa428f54021","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfe4c22f07c07cceb517f5768a7dd03c8caaa082911b9fb8f82f8fa428f54021","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfe4c22f07c07cceb517f5768a7dd03c8caaa082911b9fb8f82f8fa428f54021","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfe4c22f07c07cceb517f5768a7dd03c8caaa082911b9fb8f82f8fa428f54021","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfe4c22f07c07cceb517f5768a7dd03c8caaa082911b9fb8f82f8fa428f54021"} {"level":"debug","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04cc0485cc9d8c60d45d6ae3c996552e5c2f3b054b08a35ec2482746b27a83cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04cc0485cc9d8c60d45d6ae3c996552e5c2f3b054b08a35ec2482746b27a83cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfe4c22f07c07cceb517f5768a7dd03c8caaa082911b9fb8f82f8fa428f54021","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04cc0485cc9d8c60d45d6ae3c996552e5c2f3b054b08a35ec2482746b27a83cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4641506b522f109d169733866ef9066bab1402842913978a1cf33756d55ee5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfe4c22f07c07cceb517f5768a7dd03c8caaa082911b9fb8f82f8fa428f54021"} {"level":"info","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4641506b522f109d169733866ef9066bab1402842913978a1cf33756d55ee5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04cc0485cc9d8c60d45d6ae3c996552e5c2f3b054b08a35ec2482746b27a83cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04cc0485cc9d8c60d45d6ae3c996552e5c2f3b054b08a35ec2482746b27a83cc"} {"level":"info","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04cc0485cc9d8c60d45d6ae3c996552e5c2f3b054b08a35ec2482746b27a83cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4641506b522f109d169733866ef9066bab1402842913978a1cf33756d55ee5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4641506b522f109d169733866ef9066bab1402842913978a1cf33756d55ee5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04cc0485cc9d8c60d45d6ae3c996552e5c2f3b054b08a35ec2482746b27a83cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:25:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:25:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04cc0485cc9d8c60d45d6ae3c996552e5c2f3b054b08a35ec2482746b27a83cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4641506b522f109d169733866ef9066bab1402842913978a1cf33756d55ee5"} {"level":"info","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04cc0485cc9d8c60d45d6ae3c996552e5c2f3b054b08a35ec2482746b27a83cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe4c22f07c07cceb517f5768a7dd03c8caaa082911b9fb8f82f8fa428f54021","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:25:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:25:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cfe4c22f07c07cceb517f5768a7dd03c8caaa082911b9fb8f82f8fa428f54021"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfe4c22f07c07cceb517f5768a7dd03c8caaa082911b9fb8f82f8fa428f54021","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4641506b522f109d169733866ef9066bab1402842913978a1cf33756d55ee5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:25:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:25:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c4641506b522f109d169733866ef9066bab1402842913978a1cf33756d55ee5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04cc0485cc9d8c60d45d6ae3c996552e5c2f3b054b08a35ec2482746b27a83cc"} {"level":"info","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4641506b522f109d169733866ef9066bab1402842913978a1cf33756d55ee5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04cc0485cc9d8c60d45d6ae3c996552e5c2f3b054b08a35ec2482746b27a83cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfe4c22f07c07cceb517f5768a7dd03c8caaa082911b9fb8f82f8fa428f54021","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4641506b522f109d169733866ef9066bab1402842913978a1cf33756d55ee5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:25:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:25:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4641506b522f109d169733866ef9066bab1402842913978a1cf33756d55ee5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c4641506b522f109d169733866ef9066bab1402842913978a1cf33756d55ee5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c4641506b522f109d169733866ef9066bab1402842913978a1cf33756d55ee5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4641506b522f109d169733866ef9066bab1402842913978a1cf33756d55ee5"} {"level":"debug","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4641506b522f109d169733866ef9066bab1402842913978a1cf33756d55ee5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:25:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:25:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c4641506b522f109d169733866ef9066bab1402842913978a1cf33756d55ee5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfe4c22f07c07cceb517f5768a7dd03c8caaa082911b9fb8f82f8fa428f54021"} {"level":"info","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4641506b522f109d169733866ef9066bab1402842913978a1cf33756d55ee5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c4641506b522f109d169733866ef9066bab1402842913978a1cf33756d55ee5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04cc0485cc9d8c60d45d6ae3c996552e5c2f3b054b08a35ec2482746b27a83cc"} {"level":"info","ts":"2026-07-21T14:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4641506b522f109d169733866ef9066bab1402842913978a1cf33756d55ee5"} {"level":"info","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b928d190-4ec0-9080-ac1e-c6dae46c3ad1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:33858","PortSpecifier":{"PortValue":33858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b928d190-4ec0-9080-ac1e-c6dae46c3ad1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b928d190-4ec0-9080-ac1e-c6dae46c3ad1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:33858","PortSpecifier":{"PortValue":33858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784643948,"nanos":299251020},"http":{"id":"b928d190-4ec0-9080-ac1e-c6dae46c3ad1","method":"POST","headers":{":authority":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b928d190-4ec0-9080-ac1e-c6dae46c3ad1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b928d190-4ec0-9080-ac1e-c6dae46c3ad1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c9d8e713-ec08-4892-a56e-7b129733ef25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=69bd14ba-7c3b-4214-abdc-648afc7bb592"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f501dc36bfbb"]}} {"level":"debug","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b928d190-4ec0-9080-ac1e-c6dae46c3ad1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f501dc36bfbb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=69bd14ba-7c3b-4214-abdc-648afc7bb592"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c9d8e713-ec08-4892-a56e-7b129733ef25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e8d0686a50e7d1402fdd8dd17bc7b97614fd40cbff4191fa210bb147ad2f45a6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b928d190-4ec0-9080-ac1e-c6dae46c3ad1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b928d190-4ec0-9080-ac1e-c6dae46c3ad1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b928d190-4ec0-9080-ac1e-c6dae46c3ad1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-67be07/auth-test-model-67be07\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-67be07/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b928d190-4ec0-9080-ac1e-c6dae46c3ad1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b928d190-4ec0-9080-ac1e-c6dae46c3ad1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b928d190-4ec0-9080-ac1e-c6dae46c3ad1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b928d190-4ec0-9080-ac1e-c6dae46c3ad1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b928d190-4ec0-9080-ac1e-c6dae46c3ad1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c59e4261-d10e-4df3-a318-c9dcea6dbe6e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:56154","PortSpecifier":{"PortValue":56154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c59e4261-d10e-4df3-a318-c9dcea6dbe6e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-52967c.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c59e4261-d10e-4df3-a318-c9dcea6dbe6e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:56154","PortSpecifier":{"PortValue":56154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784643948,"nanos":340456040},"http":{"id":"c59e4261-d10e-4df3-a318-c9dcea6dbe6e","method":"POST","headers":{":authority":"e2e-shared-b-52967c.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c59e4261-d10e-4df3-a318-c9dcea6dbe6e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c59e4261-d10e-4df3-a318-c9dcea6dbe6e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c9d8e713-ec08-4892-a56e-7b129733ef25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=69bd14ba-7c3b-4214-abdc-648afc7bb592"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f501dc36bfbb"]}} {"level":"debug","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c59e4261-d10e-4df3-a318-c9dcea6dbe6e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f501dc36bfbb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=69bd14ba-7c3b-4214-abdc-648afc7bb592"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c9d8e713-ec08-4892-a56e-7b129733ef25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-52967c.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c59e4261-d10e-4df3-a318-c9dcea6dbe6e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c59e4261-d10e-4df3-a318-c9dcea6dbe6e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c59e4261-d10e-4df3-a318-c9dcea6dbe6e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-52967c/auth-test-model-52967c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-52967c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c59e4261-d10e-4df3-a318-c9dcea6dbe6e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c59e4261-d10e-4df3-a318-c9dcea6dbe6e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c59e4261-d10e-4df3-a318-c9dcea6dbe6e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c59e4261-d10e-4df3-a318-c9dcea6dbe6e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c59e4261-d10e-4df3-a318-c9dcea6dbe6e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"035507be-cdcb-4c2b-a551-03f531e58a20","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:56160","PortSpecifier":{"PortValue":56160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"035507be-cdcb-4c2b-a551-03f531e58a20","method":"GET","path":"/maas-api/v1/api-keys/7aea2f97-8d0e-4a29-b667-920f78760044","host":"e2e-shared-b-52967c.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"035507be-cdcb-4c2b-a551-03f531e58a20","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:56160","PortSpecifier":{"PortValue":56160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784643948,"nanos":383307646},"http":{"id":"035507be-cdcb-4c2b-a551-03f531e58a20","method":"GET","headers":{":authority":"e2e-shared-b-52967c.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7aea2f97-8d0e-4a29-b667-920f78760044",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"035507be-cdcb-4c2b-a551-03f531e58a20","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"035507be-cdcb-4c2b-a551-03f531e58a20","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c9d8e713-ec08-4892-a56e-7b129733ef25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=69bd14ba-7c3b-4214-abdc-648afc7bb592"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f501dc36bfbb"]}} {"level":"debug","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"035507be-cdcb-4c2b-a551-03f531e58a20","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f501dc36bfbb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=69bd14ba-7c3b-4214-abdc-648afc7bb592"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c9d8e713-ec08-4892-a56e-7b129733ef25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-52967c.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7aea2f97-8d0e-4a29-b667-920f78760044",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"035507be-cdcb-4c2b-a551-03f531e58a20","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"035507be-cdcb-4c2b-a551-03f531e58a20","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"035507be-cdcb-4c2b-a551-03f531e58a20","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-52967c/auth-test-model-52967c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-52967c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"035507be-cdcb-4c2b-a551-03f531e58a20","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"035507be-cdcb-4c2b-a551-03f531e58a20","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"035507be-cdcb-4c2b-a551-03f531e58a20","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"035507be-cdcb-4c2b-a551-03f531e58a20","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"035507be-cdcb-4c2b-a551-03f531e58a20","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f207e25c-5102-469d-8fd7-b802f0142d4f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:33866","PortSpecifier":{"PortValue":33866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f207e25c-5102-469d-8fd7-b802f0142d4f","method":"GET","path":"/maas-api/v1/api-keys/7aea2f97-8d0e-4a29-b667-920f78760044","host":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f207e25c-5102-469d-8fd7-b802f0142d4f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:33866","PortSpecifier":{"PortValue":33866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784643948,"nanos":414101292},"http":{"id":"f207e25c-5102-469d-8fd7-b802f0142d4f","method":"GET","headers":{":authority":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7aea2f97-8d0e-4a29-b667-920f78760044",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f207e25c-5102-469d-8fd7-b802f0142d4f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f207e25c-5102-469d-8fd7-b802f0142d4f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c9d8e713-ec08-4892-a56e-7b129733ef25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=69bd14ba-7c3b-4214-abdc-648afc7bb592"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f501dc36bfbb"]}} {"level":"debug","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f207e25c-5102-469d-8fd7-b802f0142d4f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f501dc36bfbb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=69bd14ba-7c3b-4214-abdc-648afc7bb592"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c9d8e713-ec08-4892-a56e-7b129733ef25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e8d0686a50e7d1402fdd8dd17bc7b97614fd40cbff4191fa210bb147ad2f45a6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7aea2f97-8d0e-4a29-b667-920f78760044",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f207e25c-5102-469d-8fd7-b802f0142d4f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f207e25c-5102-469d-8fd7-b802f0142d4f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f207e25c-5102-469d-8fd7-b802f0142d4f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-67be07/auth-test-model-67be07\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-67be07/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f207e25c-5102-469d-8fd7-b802f0142d4f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f207e25c-5102-469d-8fd7-b802f0142d4f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f207e25c-5102-469d-8fd7-b802f0142d4f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f207e25c-5102-469d-8fd7-b802f0142d4f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T14:25:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f207e25c-5102-469d-8fd7-b802f0142d4f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cfe4c22f07c07cceb517f5768a7dd03c8caaa082911b9fb8f82f8fa428f54021"} {"level":"info","ts":"2026-07-21T14:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c4641506b522f109d169733866ef9066bab1402842913978a1cf33756d55ee5"} {"level":"info","ts":"2026-07-21T14:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20"} {"level":"info","ts":"2026-07-21T14:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88"} {"level":"info","ts":"2026-07-21T14:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df9d2e6a3936f77fc94f22857fab5df0454e6d906f4e336f7bfc241dca7efb89"} {"level":"info","ts":"2026-07-21T14:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"} {"level":"info","ts":"2026-07-21T14:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cde674c75977e371c82ca47169f7e007ee8e6042104dfc7db5efcd6469664324"} {"level":"info","ts":"2026-07-21T14:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9"} {"level":"info","ts":"2026-07-21T14:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7"} {"level":"info","ts":"2026-07-21T14:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04cc0485cc9d8c60d45d6ae3c996552e5c2f3b054b08a35ec2482746b27a83cc"} {"level":"info","ts":"2026-07-21T14:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627"} {"level":"info","ts":"2026-07-21T14:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0"} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20"} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20"} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20"} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20"} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20"} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7"} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20"} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7"} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20"} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7"} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde674c75977e371c82ca47169f7e007ee8e6042104dfc7db5efcd6469664324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20"} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde674c75977e371c82ca47169f7e007ee8e6042104dfc7db5efcd6469664324","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627"} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde674c75977e371c82ca47169f7e007ee8e6042104dfc7db5efcd6469664324"} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde674c75977e371c82ca47169f7e007ee8e6042104dfc7db5efcd6469664324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cde674c75977e371c82ca47169f7e007ee8e6042104dfc7db5efcd6469664324"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde674c75977e371c82ca47169f7e007ee8e6042104dfc7db5efcd6469664324","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20"} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04cc0485cc9d8c60d45d6ae3c996552e5c2f3b054b08a35ec2482746b27a83cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627"} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04cc0485cc9d8c60d45d6ae3c996552e5c2f3b054b08a35ec2482746b27a83cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde674c75977e371c82ca47169f7e007ee8e6042104dfc7db5efcd6469664324","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04cc0485cc9d8c60d45d6ae3c996552e5c2f3b054b08a35ec2482746b27a83cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04cc0485cc9d8c60d45d6ae3c996552e5c2f3b054b08a35ec2482746b27a83cc"} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04cc0485cc9d8c60d45d6ae3c996552e5c2f3b054b08a35ec2482746b27a83cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04cc0485cc9d8c60d45d6ae3c996552e5c2f3b054b08a35ec2482746b27a83cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04cc0485cc9d8c60d45d6ae3c996552e5c2f3b054b08a35ec2482746b27a83cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20"} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04cc0485cc9d8c60d45d6ae3c996552e5c2f3b054b08a35ec2482746b27a83cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04cc0485cc9d8c60d45d6ae3c996552e5c2f3b054b08a35ec2482746b27a83cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04cc0485cc9d8c60d45d6ae3c996552e5c2f3b054b08a35ec2482746b27a83cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"04cc0485cc9d8c60d45d6ae3c996552e5c2f3b054b08a35ec2482746b27a83cc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"04cc0485cc9d8c60d45d6ae3c996552e5c2f3b054b08a35ec2482746b27a83cc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04cc0485cc9d8c60d45d6ae3c996552e5c2f3b054b08a35ec2482746b27a83cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04cc0485cc9d8c60d45d6ae3c996552e5c2f3b054b08a35ec2482746b27a83cc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde674c75977e371c82ca47169f7e007ee8e6042104dfc7db5efcd6469664324"} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627"} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04cc0485cc9d8c60d45d6ae3c996552e5c2f3b054b08a35ec2482746b27a83cc"} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9"} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88"} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9"} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88"} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df9d2e6a3936f77fc94f22857fab5df0454e6d906f4e336f7bfc241dca7efb89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df9d2e6a3936f77fc94f22857fab5df0454e6d906f4e336f7bfc241dca7efb89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9"} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df9d2e6a3936f77fc94f22857fab5df0454e6d906f4e336f7bfc241dca7efb89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88"} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df9d2e6a3936f77fc94f22857fab5df0454e6d906f4e336f7bfc241dca7efb89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df9d2e6a3936f77fc94f22857fab5df0454e6d906f4e336f7bfc241dca7efb89"} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df9d2e6a3936f77fc94f22857fab5df0454e6d906f4e336f7bfc241dca7efb89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df9d2e6a3936f77fc94f22857fab5df0454e6d906f4e336f7bfc241dca7efb89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df9d2e6a3936f77fc94f22857fab5df0454e6d906f4e336f7bfc241dca7efb89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df9d2e6a3936f77fc94f22857fab5df0454e6d906f4e336f7bfc241dca7efb89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df9d2e6a3936f77fc94f22857fab5df0454e6d906f4e336f7bfc241dca7efb89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df9d2e6a3936f77fc94f22857fab5df0454e6d906f4e336f7bfc241dca7efb89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88"} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df9d2e6a3936f77fc94f22857fab5df0454e6d906f4e336f7bfc241dca7efb89"} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0"} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0"} {"level":"info","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:26:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:26:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:26:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88"} {"level":"info","ts":"2026-07-21T14:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:26:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:26:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0"} {"level":"info","ts":"2026-07-21T14:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe4c22f07c07cceb517f5768a7dd03c8caaa082911b9fb8f82f8fa428f54021","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:26:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:26:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88"} {"level":"info","ts":"2026-07-21T14:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfe4c22f07c07cceb517f5768a7dd03c8caaa082911b9fb8f82f8fa428f54021","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfe4c22f07c07cceb517f5768a7dd03c8caaa082911b9fb8f82f8fa428f54021","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfe4c22f07c07cceb517f5768a7dd03c8caaa082911b9fb8f82f8fa428f54021","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0"} {"level":"debug","ts":"2026-07-21T14:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe4c22f07c07cceb517f5768a7dd03c8caaa082911b9fb8f82f8fa428f54021","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:26:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:26:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfe4c22f07c07cceb517f5768a7dd03c8caaa082911b9fb8f82f8fa428f54021","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfe4c22f07c07cceb517f5768a7dd03c8caaa082911b9fb8f82f8fa428f54021","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfe4c22f07c07cceb517f5768a7dd03c8caaa082911b9fb8f82f8fa428f54021"} {"level":"info","ts":"2026-07-21T14:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88"} {"level":"debug","ts":"2026-07-21T14:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:26:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:26:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfe4c22f07c07cceb517f5768a7dd03c8caaa082911b9fb8f82f8fa428f54021"} {"level":"info","ts":"2026-07-21T14:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe4c22f07c07cceb517f5768a7dd03c8caaa082911b9fb8f82f8fa428f54021","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:26:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:26:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cfe4c22f07c07cceb517f5768a7dd03c8caaa082911b9fb8f82f8fa428f54021"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfe4c22f07c07cceb517f5768a7dd03c8caaa082911b9fb8f82f8fa428f54021","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4641506b522f109d169733866ef9066bab1402842913978a1cf33756d55ee5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:26:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:26:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"} {"level":"info","ts":"2026-07-21T14:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4641506b522f109d169733866ef9066bab1402842913978a1cf33756d55ee5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:26:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:26:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfe4c22f07c07cceb517f5768a7dd03c8caaa082911b9fb8f82f8fa428f54021","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4641506b522f109d169733866ef9066bab1402842913978a1cf33756d55ee5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:26:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:26:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4641506b522f109d169733866ef9066bab1402842913978a1cf33756d55ee5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c4641506b522f109d169733866ef9066bab1402842913978a1cf33756d55ee5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c4641506b522f109d169733866ef9066bab1402842913978a1cf33756d55ee5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4641506b522f109d169733866ef9066bab1402842913978a1cf33756d55ee5"} {"level":"info","ts":"2026-07-21T14:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfe4c22f07c07cceb517f5768a7dd03c8caaa082911b9fb8f82f8fa428f54021"} {"level":"debug","ts":"2026-07-21T14:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4641506b522f109d169733866ef9066bab1402842913978a1cf33756d55ee5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:26:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:26:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c4641506b522f109d169733866ef9066bab1402842913978a1cf33756d55ee5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4641506b522f109d169733866ef9066bab1402842913978a1cf33756d55ee5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c4641506b522f109d169733866ef9066bab1402842913978a1cf33756d55ee5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"} {"level":"info","ts":"2026-07-21T14:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4641506b522f109d169733866ef9066bab1402842913978a1cf33756d55ee5"} {"level":"info","ts":"2026-07-21T14:26:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6bb02d98-7908-4138-bf7a-6f9d2a8159d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:48146","PortSpecifier":{"PortValue":48146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6bb02d98-7908-4138-bf7a-6f9d2a8159d4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T14:26:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6bb02d98-7908-4138-bf7a-6f9d2a8159d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:48146","PortSpecifier":{"PortValue":48146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784643967,"nanos":583343063},"http":{"id":"6bb02d98-7908-4138-bf7a-6f9d2a8159d4","method":"POST","headers":{":authority":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:26:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6bb02d98-7908-4138-bf7a-6f9d2a8159d4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T14:26:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6bb02d98-7908-4138-bf7a-6f9d2a8159d4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c9d8e713-ec08-4892-a56e-7b129733ef25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=69bd14ba-7c3b-4214-abdc-648afc7bb592"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f501dc36bfbb"]}} {"level":"debug","ts":"2026-07-21T14:26:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6bb02d98-7908-4138-bf7a-6f9d2a8159d4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f501dc36bfbb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=69bd14ba-7c3b-4214-abdc-648afc7bb592"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c9d8e713-ec08-4892-a56e-7b129733ef25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e8d0686a50e7d1402fdd8dd17bc7b97614fd40cbff4191fa210bb147ad2f45a6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:26:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bb02d98-7908-4138-bf7a-6f9d2a8159d4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:26:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bb02d98-7908-4138-bf7a-6f9d2a8159d4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:26:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bb02d98-7908-4138-bf7a-6f9d2a8159d4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-67be07/auth-test-model-67be07\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-67be07/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:26:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6bb02d98-7908-4138-bf7a-6f9d2a8159d4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T14:26:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bb02d98-7908-4138-bf7a-6f9d2a8159d4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T14:26:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bb02d98-7908-4138-bf7a-6f9d2a8159d4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T14:26:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6bb02d98-7908-4138-bf7a-6f9d2a8159d4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T14:26:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6bb02d98-7908-4138-bf7a-6f9d2a8159d4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T14:26:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0ce9e2b-323b-4107-8db7-eba8266078e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:58978","PortSpecifier":{"PortValue":58978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a0ce9e2b-323b-4107-8db7-eba8266078e7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-52967c.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T14:26:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0ce9e2b-323b-4107-8db7-eba8266078e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:58978","PortSpecifier":{"PortValue":58978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784643967,"nanos":628932980},"http":{"id":"a0ce9e2b-323b-4107-8db7-eba8266078e7","method":"POST","headers":{":authority":"e2e-shared-b-52967c.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:26:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a0ce9e2b-323b-4107-8db7-eba8266078e7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T14:26:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a0ce9e2b-323b-4107-8db7-eba8266078e7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c9d8e713-ec08-4892-a56e-7b129733ef25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=69bd14ba-7c3b-4214-abdc-648afc7bb592"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f501dc36bfbb"]}} {"level":"debug","ts":"2026-07-21T14:26:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a0ce9e2b-323b-4107-8db7-eba8266078e7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f501dc36bfbb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=69bd14ba-7c3b-4214-abdc-648afc7bb592"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c9d8e713-ec08-4892-a56e-7b129733ef25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-52967c.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:26:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0ce9e2b-323b-4107-8db7-eba8266078e7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:26:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0ce9e2b-323b-4107-8db7-eba8266078e7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:26:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0ce9e2b-323b-4107-8db7-eba8266078e7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-52967c/auth-test-model-52967c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-52967c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:26:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a0ce9e2b-323b-4107-8db7-eba8266078e7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T14:26:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0ce9e2b-323b-4107-8db7-eba8266078e7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T14:26:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0ce9e2b-323b-4107-8db7-eba8266078e7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T14:26:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0ce9e2b-323b-4107-8db7-eba8266078e7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T14:26:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0ce9e2b-323b-4107-8db7-eba8266078e7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T14:26:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5fe0f6b-4c5d-41a8-a826-acdbd92fcf69","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:48150","PortSpecifier":{"PortValue":48150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a5fe0f6b-4c5d-41a8-a826-acdbd92fcf69","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T14:26:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5fe0f6b-4c5d-41a8-a826-acdbd92fcf69","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:48150","PortSpecifier":{"PortValue":48150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784643967,"nanos":677665962},"http":{"id":"a5fe0f6b-4c5d-41a8-a826-acdbd92fcf69","method":"POST","headers":{":authority":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:26:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a5fe0f6b-4c5d-41a8-a826-acdbd92fcf69","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-19lYr6cT4aU5zC3fT_pB1UoFv7f2J5v2UGZFxkHgW5nXAeKu5IWPls53QFPMR"} {"level":"debug","ts":"2026-07-21T14:26:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a5fe0f6b-4c5d-41a8-a826-acdbd92fcf69","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-19lYr6cT4aU5zC3fT_pB1UoFv7f2J5v2UGZFxkHgW5nXAeKu5IWPls53QFPMR\"}"} {"level":"debug","ts":"2026-07-21T14:26:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a5fe0f6b-4c5d-41a8-a826-acdbd92fcf69","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"41b156a3-ea3b-4fb5-b404-af6ba60f2bc1","keyName":"e2e-auth-iso-a-ab0bdb","subscription":"e2e-auth-iso-6c5d04","tenant":"e2e-shared-a-67be07","userId":"41b156a3-ea3b-4fb5-b404-af6ba60f2bc1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T14:26:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a5fe0f6b-4c5d-41a8-a826-acdbd92fcf69","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:26:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5fe0f6b-4c5d-41a8-a826-acdbd92fcf69","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:26:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5fe0f6b-4c5d-41a8-a826-acdbd92fcf69","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:26:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5fe0f6b-4c5d-41a8-a826-acdbd92fcf69","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-67be07/auth-test-model-67be07\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-67be07/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:26:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a5fe0f6b-4c5d-41a8-a826-acdbd92fcf69","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-21T14:26:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5fe0f6b-4c5d-41a8-a826-acdbd92fcf69","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T14:26:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5fe0f6b-4c5d-41a8-a826-acdbd92fcf69","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T14:26:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5fe0f6b-4c5d-41a8-a826-acdbd92fcf69","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-6c5d04"} {"level":"info","ts":"2026-07-21T14:26:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5fe0f6b-4c5d-41a8-a826-acdbd92fcf69","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T14:26:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5fe0f6b-4c5d-41a8-a826-acdbd92fcf69","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T14:26:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df9d2e6a3936f77fc94f22857fab5df0454e6d906f4e336f7bfc241dca7efb89"} {"level":"info","ts":"2026-07-21T14:26:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8cbd5436a93d9a771bcb47b837916084a0755789f78322bec0c86af2e0b2b86"} {"level":"info","ts":"2026-07-21T14:26:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d4abb823b1cc028b6f42cb37373da883fed3c0efd49139caddddf173b7ffc8b"} {"level":"info","ts":"2026-07-21T14:26:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c1c0f32d51afe2727c95d21fb89ce4c3746c611c4bb46934eecb7b734fd6a422"} {"level":"info","ts":"2026-07-21T14:26:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/764adade8203cce431f71ef1a8ea6920fb4726b85c1b9591608a58f855a52b88"} {"level":"info","ts":"2026-07-21T14:26:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04cc0485cc9d8c60d45d6ae3c996552e5c2f3b054b08a35ec2482746b27a83cc"} {"level":"info","ts":"2026-07-21T14:26:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0"} {"level":"info","ts":"2026-07-21T14:26:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4dda446f88bfd0939f2e6af6059d81ceb58a74fd2dc90604ec4c072b8cbcee9f"} {"level":"info","ts":"2026-07-21T14:26:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cde674c75977e371c82ca47169f7e007ee8e6042104dfc7db5efcd6469664324"} {"level":"info","ts":"2026-07-21T14:26:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ae3c053e315bb9a4047d9528433608b8538d3d2a4740e4cb008ff9ab18aa937"} {"level":"info","ts":"2026-07-21T14:26:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c4641506b522f109d169733866ef9066bab1402842913978a1cf33756d55ee5"} {"level":"info","ts":"2026-07-21T14:26:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/adc18db052e89710a837bb8330b91bb4560e19176ac84516dff541e3c91b296c"} {"level":"info","ts":"2026-07-21T14:26:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c954eb52d50bc15d271918140fcc8e30aa07800f6f191be3aa94b08859f61b3f"} {"level":"info","ts":"2026-07-21T14:26:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df86b50d1f404f24dbc85fa4f8b9f78b6ed7b9410c056f2bc3f5be4ebab39f31"} {"level":"info","ts":"2026-07-21T14:26:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38d9bae64fe54c9ea675707bc5b247dfa2817eb3f6d64c6ecca777a451e94a56"} {"level":"info","ts":"2026-07-21T14:26:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"} {"level":"info","ts":"2026-07-21T14:26:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627"} {"level":"info","ts":"2026-07-21T14:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9"} {"level":"info","ts":"2026-07-21T14:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8d0686a50e7d1402fdd8dd17bc7b97614fd40cbff4191fa210bb147ad2f45a6"} {"level":"info","ts":"2026-07-21T14:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7fe2b6128898502d51697134d3d5a7f81839820279496a3e6aa3d93496f4a31e"} {"level":"info","ts":"2026-07-21T14:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e5baf643f42b7a7e872172796c8f214d49313a91433539c4b85a3121b1275f7"} {"level":"info","ts":"2026-07-21T14:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/541fb392bb97327dc263a5e6f9814010ef3b99857e0f3cd6055caae7cbf223d4"} {"level":"info","ts":"2026-07-21T14:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c16366a85b0f4290cc2a2a7a31e3b73b551c0b7ab637f13fae3e158588841c20"} {"level":"info","ts":"2026-07-21T14:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cfe4c22f07c07cceb517f5768a7dd03c8caaa082911b9fb8f82f8fa428f54021"} {"level":"debug","ts":"2026-07-21T14:27:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:27:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"} {"level":"debug","ts":"2026-07-21T14:27:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:27:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547"} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547"} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547"} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547"} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e"} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e"} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e"} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627"} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e"} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627"} {"level":"error","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e"} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627"} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e"} {"level":"error","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627"} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e"} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627"} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38d9bae64fe54c9ea675707bc5b247dfa2817eb3f6d64c6ecca777a451e94a56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38d9bae64fe54c9ea675707bc5b247dfa2817eb3f6d64c6ecca777a451e94a56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e"} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38d9bae64fe54c9ea675707bc5b247dfa2817eb3f6d64c6ecca777a451e94a56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38d9bae64fe54c9ea675707bc5b247dfa2817eb3f6d64c6ecca777a451e94a56"} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38d9bae64fe54c9ea675707bc5b247dfa2817eb3f6d64c6ecca777a451e94a56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38d9bae64fe54c9ea675707bc5b247dfa2817eb3f6d64c6ecca777a451e94a56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38d9bae64fe54c9ea675707bc5b247dfa2817eb3f6d64c6ecca777a451e94a56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627"} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38d9bae64fe54c9ea675707bc5b247dfa2817eb3f6d64c6ecca777a451e94a56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e"} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3c4e089ce8ea40e289a0699f3ad605ee67b27357f14ae18b24f9f3074dab8b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3c4e089ce8ea40e289a0699f3ad605ee67b27357f14ae18b24f9f3074dab8b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38d9bae64fe54c9ea675707bc5b247dfa2817eb3f6d64c6ecca777a451e94a56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38d9bae64fe54c9ea675707bc5b247dfa2817eb3f6d64c6ecca777a451e94a56"} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38d9bae64fe54c9ea675707bc5b247dfa2817eb3f6d64c6ecca777a451e94a56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3c4e089ce8ea40e289a0699f3ad605ee67b27357f14ae18b24f9f3074dab8b2"} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3c4e089ce8ea40e289a0699f3ad605ee67b27357f14ae18b24f9f3074dab8b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3c4e089ce8ea40e289a0699f3ad605ee67b27357f14ae18b24f9f3074dab8b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3c4e089ce8ea40e289a0699f3ad605ee67b27357f14ae18b24f9f3074dab8b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38d9bae64fe54c9ea675707bc5b247dfa2817eb3f6d64c6ecca777a451e94a56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38d9bae64fe54c9ea675707bc5b247dfa2817eb3f6d64c6ecca777a451e94a56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e"} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38d9bae64fe54c9ea675707bc5b247dfa2817eb3f6d64c6ecca777a451e94a56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3c4e089ce8ea40e289a0699f3ad605ee67b27357f14ae18b24f9f3074dab8b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38d9bae64fe54c9ea675707bc5b247dfa2817eb3f6d64c6ecca777a451e94a56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38d9bae64fe54c9ea675707bc5b247dfa2817eb3f6d64c6ecca777a451e94a56"} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38d9bae64fe54c9ea675707bc5b247dfa2817eb3f6d64c6ecca777a451e94a56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38d9bae64fe54c9ea675707bc5b247dfa2817eb3f6d64c6ecca777a451e94a56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38d9bae64fe54c9ea675707bc5b247dfa2817eb3f6d64c6ecca777a451e94a56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e"} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38d9bae64fe54c9ea675707bc5b247dfa2817eb3f6d64c6ecca777a451e94a56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38d9bae64fe54c9ea675707bc5b247dfa2817eb3f6d64c6ecca777a451e94a56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38d9bae64fe54c9ea675707bc5b247dfa2817eb3f6d64c6ecca777a451e94a56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"38d9bae64fe54c9ea675707bc5b247dfa2817eb3f6d64c6ecca777a451e94a56","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"38d9bae64fe54c9ea675707bc5b247dfa2817eb3f6d64c6ecca777a451e94a56\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38d9bae64fe54c9ea675707bc5b247dfa2817eb3f6d64c6ecca777a451e94a56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38d9bae64fe54c9ea675707bc5b247dfa2817eb3f6d64c6ecca777a451e94a56","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3c4e089ce8ea40e289a0699f3ad605ee67b27357f14ae18b24f9f3074dab8b2"} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38d9bae64fe54c9ea675707bc5b247dfa2817eb3f6d64c6ecca777a451e94a56"} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e"} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e"} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da35d16cccb67f65c804267dba462e5ab922e394ac0908b48c9a444a20856226","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e"} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da35d16cccb67f65c804267dba462e5ab922e394ac0908b48c9a444a20856226","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da35d16cccb67f65c804267dba462e5ab922e394ac0908b48c9a444a20856226"} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da35d16cccb67f65c804267dba462e5ab922e394ac0908b48c9a444a20856226","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da35d16cccb67f65c804267dba462e5ab922e394ac0908b48c9a444a20856226"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da35d16cccb67f65c804267dba462e5ab922e394ac0908b48c9a444a20856226","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e"} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da35d16cccb67f65c804267dba462e5ab922e394ac0908b48c9a444a20856226","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da35d16cccb67f65c804267dba462e5ab922e394ac0908b48c9a444a20856226","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"653ac78555170092f9a1f5add59d7a7438ef215ba9946e1f67ead640a456082e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da35d16cccb67f65c804267dba462e5ab922e394ac0908b48c9a444a20856226"} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"653ac78555170092f9a1f5add59d7a7438ef215ba9946e1f67ead640a456082e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da35d16cccb67f65c804267dba462e5ab922e394ac0908b48c9a444a20856226","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da35d16cccb67f65c804267dba462e5ab922e394ac0908b48c9a444a20856226"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da35d16cccb67f65c804267dba462e5ab922e394ac0908b48c9a444a20856226","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e"} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"653ac78555170092f9a1f5add59d7a7438ef215ba9946e1f67ead640a456082e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/653ac78555170092f9a1f5add59d7a7438ef215ba9946e1f67ead640a456082e"} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"653ac78555170092f9a1f5add59d7a7438ef215ba9946e1f67ead640a456082e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da35d16cccb67f65c804267dba462e5ab922e394ac0908b48c9a444a20856226","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da35d16cccb67f65c804267dba462e5ab922e394ac0908b48c9a444a20856226","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da35d16cccb67f65c804267dba462e5ab922e394ac0908b48c9a444a20856226"} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e"} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"653ac78555170092f9a1f5add59d7a7438ef215ba9946e1f67ead640a456082e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17b1e98c134991ff3454a255158b4425e57ffa2e6dec9c1dc4b4e08f8327a2f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/653ac78555170092f9a1f5add59d7a7438ef215ba9946e1f67ead640a456082e"} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17b1e98c134991ff3454a255158b4425e57ffa2e6dec9c1dc4b4e08f8327a2f6"} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17b1e98c134991ff3454a255158b4425e57ffa2e6dec9c1dc4b4e08f8327a2f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da35d16cccb67f65c804267dba462e5ab922e394ac0908b48c9a444a20856226","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"653ac78555170092f9a1f5add59d7a7438ef215ba9946e1f67ead640a456082e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["653ac78555170092f9a1f5add59d7a7438ef215ba9946e1f67ead640a456082e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da35d16cccb67f65c804267dba462e5ab922e394ac0908b48c9a444a20856226"} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e"} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"653ac78555170092f9a1f5add59d7a7438ef215ba9946e1f67ead640a456082e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17b1e98c134991ff3454a255158b4425e57ffa2e6dec9c1dc4b4e08f8327a2f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17b1e98c134991ff3454a255158b4425e57ffa2e6dec9c1dc4b4e08f8327a2f6"} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0498cdd8895bb0bc984f88c7e1133519f0dcb323ac032b89547b8d0be510387"} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17b1e98c134991ff3454a255158b4425e57ffa2e6dec9c1dc4b4e08f8327a2f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0498cdd8895bb0bc984f88c7e1133519f0dcb323ac032b89547b8d0be510387","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0498cdd8895bb0bc984f88c7e1133519f0dcb323ac032b89547b8d0be510387"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/653ac78555170092f9a1f5add59d7a7438ef215ba9946e1f67ead640a456082e"} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17b1e98c134991ff3454a255158b4425e57ffa2e6dec9c1dc4b4e08f8327a2f6"} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0498cdd8895bb0bc984f88c7e1133519f0dcb323ac032b89547b8d0be510387","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da35d16cccb67f65c804267dba462e5ab922e394ac0908b48c9a444a20856226","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da35d16cccb67f65c804267dba462e5ab922e394ac0908b48c9a444a20856226"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16814ff840340e27ab94f81f7b88644d7e964e32d93de9f50de6d31fe963f751"} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0498cdd8895bb0bc984f88c7e1133519f0dcb323ac032b89547b8d0be510387"} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da35d16cccb67f65c804267dba462e5ab922e394ac0908b48c9a444a20856226","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"653ac78555170092f9a1f5add59d7a7438ef215ba9946e1f67ead640a456082e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17b1e98c134991ff3454a255158b4425e57ffa2e6dec9c1dc4b4e08f8327a2f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17b1e98c134991ff3454a255158b4425e57ffa2e6dec9c1dc4b4e08f8327a2f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9"} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da35d16cccb67f65c804267dba462e5ab922e394ac0908b48c9a444a20856226"} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17b1e98c134991ff3454a255158b4425e57ffa2e6dec9c1dc4b4e08f8327a2f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16814ff840340e27ab94f81f7b88644d7e964e32d93de9f50de6d31fe963f751","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16814ff840340e27ab94f81f7b88644d7e964e32d93de9f50de6d31fe963f751"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0"} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/811ffded339958df1d8c266280e76b6e52af3e070f636eaaf44ed49f6933984f"} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16814ff840340e27ab94f81f7b88644d7e964e32d93de9f50de6d31fe963f751","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0498cdd8895bb0bc984f88c7e1133519f0dcb323ac032b89547b8d0be510387","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23"} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17b1e98c134991ff3454a255158b4425e57ffa2e6dec9c1dc4b4e08f8327a2f6"} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da35d16cccb67f65c804267dba462e5ab922e394ac0908b48c9a444a20856226","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e467e0cb29ab63baf6e40676b1468ed0689f2024747c80028c0f334efa9e87da"} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72285f1e058b4537a5eeddee8406e1a5b89c62c3db3d07f7894b49772658837c"} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16814ff840340e27ab94f81f7b88644d7e964e32d93de9f50de6d31fe963f751"} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"811ffded339958df1d8c266280e76b6e52af3e070f636eaaf44ed49f6933984f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["811ffded339958df1d8c266280e76b6e52af3e070f636eaaf44ed49f6933984f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8d0686a50e7d1402fdd8dd17bc7b97614fd40cbff4191fa210bb147ad2f45a6"} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c57740a10e2468cc96d74bb46418be2ea1148b54956456d3d52ee13113f3e2b5"} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"811ffded339958df1d8c266280e76b6e52af3e070f636eaaf44ed49f6933984f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9"} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab3068d20b4bd99c842c6b6c9198c8569c6e1cc5c763f2b26cc321bc0b19b2b2"} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17b1e98c134991ff3454a255158b4425e57ffa2e6dec9c1dc4b4e08f8327a2f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e467e0cb29ab63baf6e40676b1468ed0689f2024747c80028c0f334efa9e87da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e467e0cb29ab63baf6e40676b1468ed0689f2024747c80028c0f334efa9e87da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0"} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/541fb392bb97327dc263a5e6f9814010ef3b99857e0f3cd6055caae7cbf223d4"} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e467e0cb29ab63baf6e40676b1468ed0689f2024747c80028c0f334efa9e87da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72285f1e058b4537a5eeddee8406e1a5b89c62c3db3d07f7894b49772658837c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72285f1e058b4537a5eeddee8406e1a5b89c62c3db3d07f7894b49772658837c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fb470630e49733017f48b961ffc0adef27ba51b42f2ae50dcebe70e7f6a764f"} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c954eb52d50bc15d271918140fcc8e30aa07800f6f191be3aa94b08859f61b3f"} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/811ffded339958df1d8c266280e76b6e52af3e070f636eaaf44ed49f6933984f"} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72285f1e058b4537a5eeddee8406e1a5b89c62c3db3d07f7894b49772658837c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16814ff840340e27ab94f81f7b88644d7e964e32d93de9f50de6d31fe963f751","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8d0686a50e7d1402fdd8dd17bc7b97614fd40cbff4191fa210bb147ad2f45a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8d0686a50e7d1402fdd8dd17bc7b97614fd40cbff4191fa210bb147ad2f45a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23"} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e467e0cb29ab63baf6e40676b1468ed0689f2024747c80028c0f334efa9e87da"} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8d0686a50e7d1402fdd8dd17bc7b97614fd40cbff4191fa210bb147ad2f45a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c57740a10e2468cc96d74bb46418be2ea1148b54956456d3d52ee13113f3e2b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c57740a10e2468cc96d74bb46418be2ea1148b54956456d3d52ee13113f3e2b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72285f1e058b4537a5eeddee8406e1a5b89c62c3db3d07f7894b49772658837c"} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8d0686a50e7d1402fdd8dd17bc7b97614fd40cbff4191fa210bb147ad2f45a6"} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c57740a10e2468cc96d74bb46418be2ea1148b54956456d3d52ee13113f3e2b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab3068d20b4bd99c842c6b6c9198c8569c6e1cc5c763f2b26cc321bc0b19b2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab3068d20b4bd99c842c6b6c9198c8569c6e1cc5c763f2b26cc321bc0b19b2b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c57740a10e2468cc96d74bb46418be2ea1148b54956456d3d52ee13113f3e2b5"} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab3068d20b4bd99c842c6b6c9198c8569c6e1cc5c763f2b26cc321bc0b19b2b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"541fb392bb97327dc263a5e6f9814010ef3b99857e0f3cd6055caae7cbf223d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["541fb392bb97327dc263a5e6f9814010ef3b99857e0f3cd6055caae7cbf223d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab3068d20b4bd99c842c6b6c9198c8569c6e1cc5c763f2b26cc321bc0b19b2b2"} {"level":"info","ts":"2026-07-21T14:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"541fb392bb97327dc263a5e6f9814010ef3b99857e0f3cd6055caae7cbf223d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fb470630e49733017f48b961ffc0adef27ba51b42f2ae50dcebe70e7f6a764f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fb470630e49733017f48b961ffc0adef27ba51b42f2ae50dcebe70e7f6a764f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/541fb392bb97327dc263a5e6f9814010ef3b99857e0f3cd6055caae7cbf223d4"} {"level":"info","ts":"2026-07-21T14:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fb470630e49733017f48b961ffc0adef27ba51b42f2ae50dcebe70e7f6a764f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c954eb52d50bc15d271918140fcc8e30aa07800f6f191be3aa94b08859f61b3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c954eb52d50bc15d271918140fcc8e30aa07800f6f191be3aa94b08859f61b3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c954eb52d50bc15d271918140fcc8e30aa07800f6f191be3aa94b08859f61b3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"811ffded339958df1d8c266280e76b6e52af3e070f636eaaf44ed49f6933984f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e467e0cb29ab63baf6e40676b1468ed0689f2024747c80028c0f334efa9e87da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72285f1e058b4537a5eeddee8406e1a5b89c62c3db3d07f7894b49772658837c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8d0686a50e7d1402fdd8dd17bc7b97614fd40cbff4191fa210bb147ad2f45a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c57740a10e2468cc96d74bb46418be2ea1148b54956456d3d52ee13113f3e2b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab3068d20b4bd99c842c6b6c9198c8569c6e1cc5c763f2b26cc321bc0b19b2b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"541fb392bb97327dc263a5e6f9814010ef3b99857e0f3cd6055caae7cbf223d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fb470630e49733017f48b961ffc0adef27ba51b42f2ae50dcebe70e7f6a764f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fb470630e49733017f48b961ffc0adef27ba51b42f2ae50dcebe70e7f6a764f"} {"level":"info","ts":"2026-07-21T14:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c954eb52d50bc15d271918140fcc8e30aa07800f6f191be3aa94b08859f61b3f"} {"level":"info","ts":"2026-07-21T14:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fb470630e49733017f48b961ffc0adef27ba51b42f2ae50dcebe70e7f6a764f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c954eb52d50bc15d271918140fcc8e30aa07800f6f191be3aa94b08859f61b3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fb470630e49733017f48b961ffc0adef27ba51b42f2ae50dcebe70e7f6a764f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fb470630e49733017f48b961ffc0adef27ba51b42f2ae50dcebe70e7f6a764f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fb470630e49733017f48b961ffc0adef27ba51b42f2ae50dcebe70e7f6a764f"} {"level":"info","ts":"2026-07-21T14:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fb470630e49733017f48b961ffc0adef27ba51b42f2ae50dcebe70e7f6a764f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fb470630e49733017f48b961ffc0adef27ba51b42f2ae50dcebe70e7f6a764f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fb470630e49733017f48b961ffc0adef27ba51b42f2ae50dcebe70e7f6a764f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fb470630e49733017f48b961ffc0adef27ba51b42f2ae50dcebe70e7f6a764f"} {"level":"error","ts":"2026-07-21T14:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6fb470630e49733017f48b961ffc0adef27ba51b42f2ae50dcebe70e7f6a764f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6fb470630e49733017f48b961ffc0adef27ba51b42f2ae50dcebe70e7f6a764f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T14:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fb470630e49733017f48b961ffc0adef27ba51b42f2ae50dcebe70e7f6a764f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fb470630e49733017f48b961ffc0adef27ba51b42f2ae50dcebe70e7f6a764f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da83f99e-84d4-4049-85d2-53d81df946a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:53604","PortSpecifier":{"PortValue":53604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"da83f99e-84d4-4049-85d2-53d81df946a1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da83f99e-84d4-4049-85d2-53d81df946a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:53604","PortSpecifier":{"PortValue":53604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784644035,"nanos":82276935},"http":{"id":"da83f99e-84d4-4049-85d2-53d81df946a1","method":"POST","headers":{":authority":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"da83f99e-84d4-4049-85d2-53d81df946a1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"da83f99e-84d4-4049-85d2-53d81df946a1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c9d8e713-ec08-4892-a56e-7b129733ef25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=69bd14ba-7c3b-4214-abdc-648afc7bb592"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f501dc36bfbb"]}} {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"da83f99e-84d4-4049-85d2-53d81df946a1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f501dc36bfbb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=69bd14ba-7c3b-4214-abdc-648afc7bb592"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c9d8e713-ec08-4892-a56e-7b129733ef25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e8d0686a50e7d1402fdd8dd17bc7b97614fd40cbff4191fa210bb147ad2f45a6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da83f99e-84d4-4049-85d2-53d81df946a1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da83f99e-84d4-4049-85d2-53d81df946a1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da83f99e-84d4-4049-85d2-53d81df946a1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-67be07/sub-test-model-67be07\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-67be07/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"da83f99e-84d4-4049-85d2-53d81df946a1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da83f99e-84d4-4049-85d2-53d81df946a1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da83f99e-84d4-4049-85d2-53d81df946a1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da83f99e-84d4-4049-85d2-53d81df946a1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da83f99e-84d4-4049-85d2-53d81df946a1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3f92b9f-cde1-4c1b-893f-ee6bc45598b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:49796","PortSpecifier":{"PortValue":49796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c3f92b9f-cde1-4c1b-893f-ee6bc45598b9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-52967c.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3f92b9f-cde1-4c1b-893f-ee6bc45598b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:49796","PortSpecifier":{"PortValue":49796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784644035,"nanos":122595517},"http":{"id":"c3f92b9f-cde1-4c1b-893f-ee6bc45598b9","method":"POST","headers":{":authority":"e2e-shared-b-52967c.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c3f92b9f-cde1-4c1b-893f-ee6bc45598b9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c3f92b9f-cde1-4c1b-893f-ee6bc45598b9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c9d8e713-ec08-4892-a56e-7b129733ef25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=69bd14ba-7c3b-4214-abdc-648afc7bb592"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f501dc36bfbb"]}} {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c3f92b9f-cde1-4c1b-893f-ee6bc45598b9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f501dc36bfbb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=69bd14ba-7c3b-4214-abdc-648afc7bb592"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c9d8e713-ec08-4892-a56e-7b129733ef25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-52967c.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3f92b9f-cde1-4c1b-893f-ee6bc45598b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3f92b9f-cde1-4c1b-893f-ee6bc45598b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3f92b9f-cde1-4c1b-893f-ee6bc45598b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-52967c/sub-test-model-52967c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-52967c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c3f92b9f-cde1-4c1b-893f-ee6bc45598b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3f92b9f-cde1-4c1b-893f-ee6bc45598b9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3f92b9f-cde1-4c1b-893f-ee6bc45598b9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3f92b9f-cde1-4c1b-893f-ee6bc45598b9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3f92b9f-cde1-4c1b-893f-ee6bc45598b9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"629b7215-d3fe-4729-a0bc-2a006d851656","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:53618","PortSpecifier":{"PortValue":53618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"629b7215-d3fe-4729-a0bc-2a006d851656","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"629b7215-d3fe-4729-a0bc-2a006d851656","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:53618","PortSpecifier":{"PortValue":53618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784644035,"nanos":169061961},"http":{"id":"629b7215-d3fe-4729-a0bc-2a006d851656","method":"GET","headers":{":authority":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"629b7215-d3fe-4729-a0bc-2a006d851656","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Zr3n0ww8iaGlc0ik_sZ9EOxmUrDmFFlDRo9VuJbqT3h4cDoTIfg6DwXQMwXL"} {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"629b7215-d3fe-4729-a0bc-2a006d851656","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Zr3n0ww8iaGlc0ik_sZ9EOxmUrDmFFlDRo9VuJbqT3h4cDoTIfg6DwXQMwXL\"}"} {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"629b7215-d3fe-4729-a0bc-2a006d851656","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"88681354-712c-4a21-8b60-e76cc1ecad2f","keyName":"e2e-sub-iso-fa7fe8","subscription":"e2e-a-only-e5974d","tenant":"e2e-shared-a-67be07","userId":"88681354-712c-4a21-8b60-e76cc1ecad2f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"629b7215-d3fe-4729-a0bc-2a006d851656","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"629b7215-d3fe-4729-a0bc-2a006d851656","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"629b7215-d3fe-4729-a0bc-2a006d851656","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"629b7215-d3fe-4729-a0bc-2a006d851656","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-67be07/sub-test-model-67be07\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-67be07/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"629b7215-d3fe-4729-a0bc-2a006d851656","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-e5974d"} {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"629b7215-d3fe-4729-a0bc-2a006d851656","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"629b7215-d3fe-4729-a0bc-2a006d851656","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"629b7215-d3fe-4729-a0bc-2a006d851656","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"629b7215-d3fe-4729-a0bc-2a006d851656","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"629b7215-d3fe-4729-a0bc-2a006d851656","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04ae61ee-da98-4fa9-96e9-9daf5d949e41","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:49804","PortSpecifier":{"PortValue":49804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"04ae61ee-da98-4fa9-96e9-9daf5d949e41","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-52967c.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04ae61ee-da98-4fa9-96e9-9daf5d949e41","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:49804","PortSpecifier":{"PortValue":49804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784644035,"nanos":211229657},"http":{"id":"04ae61ee-da98-4fa9-96e9-9daf5d949e41","method":"GET","headers":{":authority":"e2e-shared-b-52967c.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"04ae61ee-da98-4fa9-96e9-9daf5d949e41","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-pNAfkHBR45JoKbUw_CDBoRDUhuR37tSRPU0UuobrZ1SXq0pc06KqKHbJ01nv"} {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"04ae61ee-da98-4fa9-96e9-9daf5d949e41","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-52967c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-pNAfkHBR45JoKbUw_CDBoRDUhuR37tSRPU0UuobrZ1SXq0pc06KqKHbJ01nv\"}"} {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"04ae61ee-da98-4fa9-96e9-9daf5d949e41","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-52967c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"41e1af71-4a77-4173-93dd-a9c08248156a","keyName":"e2e-sub-iso-365edc","subscription":"e2e-b-only-e5974d","tenant":"e2e-shared-b-52967c","userId":"41e1af71-4a77-4173-93dd-a9c08248156a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"04ae61ee-da98-4fa9-96e9-9daf5d949e41","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04ae61ee-da98-4fa9-96e9-9daf5d949e41","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04ae61ee-da98-4fa9-96e9-9daf5d949e41","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04ae61ee-da98-4fa9-96e9-9daf5d949e41","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-52967c/sub-test-model-52967c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-52967c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"04ae61ee-da98-4fa9-96e9-9daf5d949e41","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04ae61ee-da98-4fa9-96e9-9daf5d949e41","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04ae61ee-da98-4fa9-96e9-9daf5d949e41","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04ae61ee-da98-4fa9-96e9-9daf5d949e41","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-e5974d"} {"level":"info","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04ae61ee-da98-4fa9-96e9-9daf5d949e41","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T14:27:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04ae61ee-da98-4fa9-96e9-9daf5d949e41","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T14:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9"} {"level":"info","ts":"2026-07-21T14:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627"} {"level":"info","ts":"2026-07-21T14:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0"} {"level":"info","ts":"2026-07-21T14:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0498cdd8895bb0bc984f88c7e1133519f0dcb323ac032b89547b8d0be510387"} {"level":"info","ts":"2026-07-21T14:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547"} {"level":"info","ts":"2026-07-21T14:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e"} {"level":"info","ts":"2026-07-21T14:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"} {"level":"info","ts":"2026-07-21T14:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c57740a10e2468cc96d74bb46418be2ea1148b54956456d3d52ee13113f3e2b5"} {"level":"info","ts":"2026-07-21T14:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16814ff840340e27ab94f81f7b88644d7e964e32d93de9f50de6d31fe963f751"} {"level":"info","ts":"2026-07-21T14:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23"} {"level":"info","ts":"2026-07-21T14:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab3068d20b4bd99c842c6b6c9198c8569c6e1cc5c763f2b26cc321bc0b19b2b2"} {"level":"info","ts":"2026-07-21T14:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e"} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c57740a10e2468cc96d74bb46418be2ea1148b54956456d3d52ee13113f3e2b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c57740a10e2468cc96d74bb46418be2ea1148b54956456d3d52ee13113f3e2b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c57740a10e2468cc96d74bb46418be2ea1148b54956456d3d52ee13113f3e2b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c57740a10e2468cc96d74bb46418be2ea1148b54956456d3d52ee13113f3e2b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c57740a10e2468cc96d74bb46418be2ea1148b54956456d3d52ee13113f3e2b5"} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c57740a10e2468cc96d74bb46418be2ea1148b54956456d3d52ee13113f3e2b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c57740a10e2468cc96d74bb46418be2ea1148b54956456d3d52ee13113f3e2b5"} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c57740a10e2468cc96d74bb46418be2ea1148b54956456d3d52ee13113f3e2b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c57740a10e2468cc96d74bb46418be2ea1148b54956456d3d52ee13113f3e2b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c57740a10e2468cc96d74bb46418be2ea1148b54956456d3d52ee13113f3e2b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c57740a10e2468cc96d74bb46418be2ea1148b54956456d3d52ee13113f3e2b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c57740a10e2468cc96d74bb46418be2ea1148b54956456d3d52ee13113f3e2b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c57740a10e2468cc96d74bb46418be2ea1148b54956456d3d52ee13113f3e2b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c57740a10e2468cc96d74bb46418be2ea1148b54956456d3d52ee13113f3e2b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c57740a10e2468cc96d74bb46418be2ea1148b54956456d3d52ee13113f3e2b5"} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c57740a10e2468cc96d74bb46418be2ea1148b54956456d3d52ee13113f3e2b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c57740a10e2468cc96d74bb46418be2ea1148b54956456d3d52ee13113f3e2b5"} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c57740a10e2468cc96d74bb46418be2ea1148b54956456d3d52ee13113f3e2b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c57740a10e2468cc96d74bb46418be2ea1148b54956456d3d52ee13113f3e2b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c57740a10e2468cc96d74bb46418be2ea1148b54956456d3d52ee13113f3e2b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c57740a10e2468cc96d74bb46418be2ea1148b54956456d3d52ee13113f3e2b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c57740a10e2468cc96d74bb46418be2ea1148b54956456d3d52ee13113f3e2b5"} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23"} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23"} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23"} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23"} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e"} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23"} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e"} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23"} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e"} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23"} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e"} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16814ff840340e27ab94f81f7b88644d7e964e32d93de9f50de6d31fe963f751","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16814ff840340e27ab94f81f7b88644d7e964e32d93de9f50de6d31fe963f751","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23"} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16814ff840340e27ab94f81f7b88644d7e964e32d93de9f50de6d31fe963f751"} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16814ff840340e27ab94f81f7b88644d7e964e32d93de9f50de6d31fe963f751","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16814ff840340e27ab94f81f7b88644d7e964e32d93de9f50de6d31fe963f751"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16814ff840340e27ab94f81f7b88644d7e964e32d93de9f50de6d31fe963f751","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e"} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16814ff840340e27ab94f81f7b88644d7e964e32d93de9f50de6d31fe963f751","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23"} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16814ff840340e27ab94f81f7b88644d7e964e32d93de9f50de6d31fe963f751"} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e"} {"level":"debug","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23"} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e"} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e"} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e"} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e"} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9"} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9"} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547"} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547"} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9"} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547"} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9"} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547"} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9"} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547"} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab3068d20b4bd99c842c6b6c9198c8569c6e1cc5c763f2b26cc321bc0b19b2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab3068d20b4bd99c842c6b6c9198c8569c6e1cc5c763f2b26cc321bc0b19b2b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab3068d20b4bd99c842c6b6c9198c8569c6e1cc5c763f2b26cc321bc0b19b2b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab3068d20b4bd99c842c6b6c9198c8569c6e1cc5c763f2b26cc321bc0b19b2b2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab3068d20b4bd99c842c6b6c9198c8569c6e1cc5c763f2b26cc321bc0b19b2b2"} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab3068d20b4bd99c842c6b6c9198c8569c6e1cc5c763f2b26cc321bc0b19b2b2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab3068d20b4bd99c842c6b6c9198c8569c6e1cc5c763f2b26cc321bc0b19b2b2"} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab3068d20b4bd99c842c6b6c9198c8569c6e1cc5c763f2b26cc321bc0b19b2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab3068d20b4bd99c842c6b6c9198c8569c6e1cc5c763f2b26cc321bc0b19b2b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab3068d20b4bd99c842c6b6c9198c8569c6e1cc5c763f2b26cc321bc0b19b2b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab3068d20b4bd99c842c6b6c9198c8569c6e1cc5c763f2b26cc321bc0b19b2b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627"} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab3068d20b4bd99c842c6b6c9198c8569c6e1cc5c763f2b26cc321bc0b19b2b2"} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627"} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627"} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627"} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627"} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627"} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0498cdd8895bb0bc984f88c7e1133519f0dcb323ac032b89547b8d0be510387","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0498cdd8895bb0bc984f88c7e1133519f0dcb323ac032b89547b8d0be510387","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0498cdd8895bb0bc984f88c7e1133519f0dcb323ac032b89547b8d0be510387"} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0498cdd8895bb0bc984f88c7e1133519f0dcb323ac032b89547b8d0be510387","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0498cdd8895bb0bc984f88c7e1133519f0dcb323ac032b89547b8d0be510387"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627"} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0498cdd8895bb0bc984f88c7e1133519f0dcb323ac032b89547b8d0be510387","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0498cdd8895bb0bc984f88c7e1133519f0dcb323ac032b89547b8d0be510387","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0498cdd8895bb0bc984f88c7e1133519f0dcb323ac032b89547b8d0be510387","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0498cdd8895bb0bc984f88c7e1133519f0dcb323ac032b89547b8d0be510387"} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627"} {"level":"info","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0498cdd8895bb0bc984f88c7e1133519f0dcb323ac032b89547b8d0be510387","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0498cdd8895bb0bc984f88c7e1133519f0dcb323ac032b89547b8d0be510387"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"} {"level":"info","ts":"2026-07-21T14:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0498cdd8895bb0bc984f88c7e1133519f0dcb323ac032b89547b8d0be510387","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0498cdd8895bb0bc984f88c7e1133519f0dcb323ac032b89547b8d0be510387"} {"level":"info","ts":"2026-07-21T14:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"} {"level":"info","ts":"2026-07-21T14:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0498cdd8895bb0bc984f88c7e1133519f0dcb323ac032b89547b8d0be510387","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e"} {"level":"debug","ts":"2026-07-21T14:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0498cdd8895bb0bc984f88c7e1133519f0dcb323ac032b89547b8d0be510387"} {"level":"info","ts":"2026-07-21T14:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0"} {"level":"info","ts":"2026-07-21T14:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e"} {"level":"info","ts":"2026-07-21T14:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0"} {"level":"info","ts":"2026-07-21T14:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e"} {"level":"info","ts":"2026-07-21T14:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0"} {"level":"info","ts":"2026-07-21T14:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:27:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:27:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e"} {"level":"info","ts":"2026-07-21T14:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e"} {"level":"info","ts":"2026-07-21T14:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:27:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:27:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e"} {"level":"error","ts":"2026-07-21T14:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T14:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"efa8fc43-e38d-4bbf-8949-dee060f4870a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:56506","PortSpecifier":{"PortValue":56506}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"efa8fc43-e38d-4bbf-8949-dee060f4870a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"efa8fc43-e38d-4bbf-8949-dee060f4870a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:56506","PortSpecifier":{"PortValue":56506}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784644053,"nanos":678232439},"http":{"id":"efa8fc43-e38d-4bbf-8949-dee060f4870a","method":"POST","headers":{":authority":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"efa8fc43-e38d-4bbf-8949-dee060f4870a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"efa8fc43-e38d-4bbf-8949-dee060f4870a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c9d8e713-ec08-4892-a56e-7b129733ef25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=69bd14ba-7c3b-4214-abdc-648afc7bb592"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f501dc36bfbb"]}} {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"efa8fc43-e38d-4bbf-8949-dee060f4870a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f501dc36bfbb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=69bd14ba-7c3b-4214-abdc-648afc7bb592"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c9d8e713-ec08-4892-a56e-7b129733ef25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e8d0686a50e7d1402fdd8dd17bc7b97614fd40cbff4191fa210bb147ad2f45a6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efa8fc43-e38d-4bbf-8949-dee060f4870a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efa8fc43-e38d-4bbf-8949-dee060f4870a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efa8fc43-e38d-4bbf-8949-dee060f4870a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-67be07/sub-test-model-67be07\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-67be07/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"efa8fc43-e38d-4bbf-8949-dee060f4870a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"efa8fc43-e38d-4bbf-8949-dee060f4870a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"efa8fc43-e38d-4bbf-8949-dee060f4870a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"efa8fc43-e38d-4bbf-8949-dee060f4870a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"efa8fc43-e38d-4bbf-8949-dee060f4870a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65578730-9b29-45f2-89f5-bcbeba634f98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:36364","PortSpecifier":{"PortValue":36364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"65578730-9b29-45f2-89f5-bcbeba634f98","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-52967c.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65578730-9b29-45f2-89f5-bcbeba634f98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:36364","PortSpecifier":{"PortValue":36364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784644053,"nanos":718283991},"http":{"id":"65578730-9b29-45f2-89f5-bcbeba634f98","method":"POST","headers":{":authority":"e2e-shared-b-52967c.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"65578730-9b29-45f2-89f5-bcbeba634f98","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"65578730-9b29-45f2-89f5-bcbeba634f98","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c9d8e713-ec08-4892-a56e-7b129733ef25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=69bd14ba-7c3b-4214-abdc-648afc7bb592"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f501dc36bfbb"]}} {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"65578730-9b29-45f2-89f5-bcbeba634f98","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f501dc36bfbb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=69bd14ba-7c3b-4214-abdc-648afc7bb592"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c9d8e713-ec08-4892-a56e-7b129733ef25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-52967c.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65578730-9b29-45f2-89f5-bcbeba634f98","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65578730-9b29-45f2-89f5-bcbeba634f98","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65578730-9b29-45f2-89f5-bcbeba634f98","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-52967c/sub-test-model-52967c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-52967c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"65578730-9b29-45f2-89f5-bcbeba634f98","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65578730-9b29-45f2-89f5-bcbeba634f98","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65578730-9b29-45f2-89f5-bcbeba634f98","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65578730-9b29-45f2-89f5-bcbeba634f98","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65578730-9b29-45f2-89f5-bcbeba634f98","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"848b5cf3-5983-4e62-b006-fad38d6bc5c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:56508","PortSpecifier":{"PortValue":56508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"848b5cf3-5983-4e62-b006-fad38d6bc5c5","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"848b5cf3-5983-4e62-b006-fad38d6bc5c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:56508","PortSpecifier":{"PortValue":56508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784644053,"nanos":754501987},"http":{"id":"848b5cf3-5983-4e62-b006-fad38d6bc5c5","method":"POST","headers":{":authority":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"848b5cf3-5983-4e62-b006-fad38d6bc5c5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YRRxKHorFOLA85Hb_LrTjxst3t3W2NIr5veYLQztlRVamuU7JXJBtZZSiL3x"} {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"848b5cf3-5983-4e62-b006-fad38d6bc5c5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YRRxKHorFOLA85Hb_LrTjxst3t3W2NIr5veYLQztlRVamuU7JXJBtZZSiL3x\"}"} {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"848b5cf3-5983-4e62-b006-fad38d6bc5c5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c9421595-b89f-43db-9b78-dbfa439a7a78","keyName":"e2e-sub-iso-a9412d","subscription":"e2e-shared-sub-75cf84","tenant":"e2e-shared-a-67be07","userId":"c9421595-b89f-43db-9b78-dbfa439a7a78","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"848b5cf3-5983-4e62-b006-fad38d6bc5c5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"848b5cf3-5983-4e62-b006-fad38d6bc5c5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"848b5cf3-5983-4e62-b006-fad38d6bc5c5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"848b5cf3-5983-4e62-b006-fad38d6bc5c5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-67be07/sub-test-model-67be07\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-67be07/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"848b5cf3-5983-4e62-b006-fad38d6bc5c5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"848b5cf3-5983-4e62-b006-fad38d6bc5c5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"848b5cf3-5983-4e62-b006-fad38d6bc5c5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"848b5cf3-5983-4e62-b006-fad38d6bc5c5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-75cf84"} {"level":"info","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"848b5cf3-5983-4e62-b006-fad38d6bc5c5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"848b5cf3-5983-4e62-b006-fad38d6bc5c5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f08c2a9-86e8-48f3-b741-cb36848a0b45","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:36370","PortSpecifier":{"PortValue":36370}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4f08c2a9-86e8-48f3-b741-cb36848a0b45","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-52967c.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f08c2a9-86e8-48f3-b741-cb36848a0b45","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:36370","PortSpecifier":{"PortValue":36370}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784644053,"nanos":785845257},"http":{"id":"4f08c2a9-86e8-48f3-b741-cb36848a0b45","method":"POST","headers":{":authority":"e2e-shared-b-52967c.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4f08c2a9-86e8-48f3-b741-cb36848a0b45","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1DSppLJ229BIyDKXJ_gNSsnBiYIVzIyfTrvKkSUWNEiPifkUUxSyHylHznwdp"} {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4f08c2a9-86e8-48f3-b741-cb36848a0b45","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-52967c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1DSppLJ229BIyDKXJ_gNSsnBiYIVzIyfTrvKkSUWNEiPifkUUxSyHylHznwdp\"}"} {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4f08c2a9-86e8-48f3-b741-cb36848a0b45","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-52967c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"750489a5-6f29-4bff-8c78-53e6d8da4101","keyName":"e2e-sub-iso-aaef0c","subscription":"e2e-shared-sub-75cf84","tenant":"e2e-shared-b-52967c","userId":"750489a5-6f29-4bff-8c78-53e6d8da4101","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4f08c2a9-86e8-48f3-b741-cb36848a0b45","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f08c2a9-86e8-48f3-b741-cb36848a0b45","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f08c2a9-86e8-48f3-b741-cb36848a0b45","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f08c2a9-86e8-48f3-b741-cb36848a0b45","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-52967c/sub-test-model-52967c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-52967c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f08c2a9-86e8-48f3-b741-cb36848a0b45","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f08c2a9-86e8-48f3-b741-cb36848a0b45","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-75cf84"} {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4f08c2a9-86e8-48f3-b741-cb36848a0b45","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f08c2a9-86e8-48f3-b741-cb36848a0b45","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f08c2a9-86e8-48f3-b741-cb36848a0b45","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T14:27:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f08c2a9-86e8-48f3-b741-cb36848a0b45","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T14:27:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0"} {"level":"info","ts":"2026-07-21T14:27:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6fb470630e49733017f48b961ffc0adef27ba51b42f2ae50dcebe70e7f6a764f"} {"level":"info","ts":"2026-07-21T14:27:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3536f5018ea5f137023db03a3d86d7b9294340e41bf2c5c4b20f32a57e8c4b8e"} {"level":"info","ts":"2026-07-21T14:27:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627"} {"level":"info","ts":"2026-07-21T14:27:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c57740a10e2468cc96d74bb46418be2ea1148b54956456d3d52ee13113f3e2b5"} {"level":"info","ts":"2026-07-21T14:27:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"} {"level":"info","ts":"2026-07-21T14:27:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71f2b0892d09fef15dec3d228b2e463fa4527a642646f0bde63bf8da8728c547"} {"level":"info","ts":"2026-07-21T14:27:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9"} {"level":"info","ts":"2026-07-21T14:27:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c954eb52d50bc15d271918140fcc8e30aa07800f6f191be3aa94b08859f61b3f"} {"level":"info","ts":"2026-07-21T14:27:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/17b1e98c134991ff3454a255158b4425e57ffa2e6dec9c1dc4b4e08f8327a2f6"} {"level":"info","ts":"2026-07-21T14:27:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e1acf1fd2dcdf180de05591c6fe6a3e383cb203442c3057d68862eef6c0dd9e"} {"level":"info","ts":"2026-07-21T14:27:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f13b05d3123a0e518c46e31f4dfc192b6127ea5525cd625fe3c63d008e83e23"} {"level":"info","ts":"2026-07-21T14:27:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/541fb392bb97327dc263a5e6f9814010ef3b99857e0f3cd6055caae7cbf223d4"} {"level":"info","ts":"2026-07-21T14:27:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38d9bae64fe54c9ea675707bc5b247dfa2817eb3f6d64c6ecca777a451e94a56"} {"level":"info","ts":"2026-07-21T14:27:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/811ffded339958df1d8c266280e76b6e52af3e070f636eaaf44ed49f6933984f"} {"level":"info","ts":"2026-07-21T14:27:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16814ff840340e27ab94f81f7b88644d7e964e32d93de9f50de6d31fe963f751"} {"level":"info","ts":"2026-07-21T14:27:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8d0686a50e7d1402fdd8dd17bc7b97614fd40cbff4191fa210bb147ad2f45a6"} {"level":"info","ts":"2026-07-21T14:27:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab3068d20b4bd99c842c6b6c9198c8569c6e1cc5c763f2b26cc321bc0b19b2b2"} {"level":"info","ts":"2026-07-21T14:27:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e467e0cb29ab63baf6e40676b1468ed0689f2024747c80028c0f334efa9e87da"} {"level":"info","ts":"2026-07-21T14:27:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/72285f1e058b4537a5eeddee8406e1a5b89c62c3db3d07f7894b49772658837c"} {"level":"info","ts":"2026-07-21T14:27:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da35d16cccb67f65c804267dba462e5ab922e394ac0908b48c9a444a20856226"} {"level":"info","ts":"2026-07-21T14:27:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3c4e089ce8ea40e289a0699f3ad605ee67b27357f14ae18b24f9f3074dab8b2"} {"level":"info","ts":"2026-07-21T14:27:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/653ac78555170092f9a1f5add59d7a7438ef215ba9946e1f67ead640a456082e"} {"level":"info","ts":"2026-07-21T14:27:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0498cdd8895bb0bc984f88c7e1133519f0dcb323ac032b89547b8d0be510387"} {"level":"debug","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:29:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:29:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:29:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:29:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d"} {"level":"info","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:29:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:29:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d"} {"level":"info","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d"} {"level":"debug","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:29:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:29:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:29:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:29:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d"} {"level":"debug","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d"} {"level":"debug","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1eddda6d459b295395471a559ae4bf6f13707d14e3c2bea18048c4e37642e5cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:29:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:29:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eddda6d459b295395471a559ae4bf6f13707d14e3c2bea18048c4e37642e5cd"} {"level":"info","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1eddda6d459b295395471a559ae4bf6f13707d14e3c2bea18048c4e37642e5cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:29:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:29:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1eddda6d459b295395471a559ae4bf6f13707d14e3c2bea18048c4e37642e5cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:29:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:29:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eddda6d459b295395471a559ae4bf6f13707d14e3c2bea18048c4e37642e5cd"} {"level":"info","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1eddda6d459b295395471a559ae4bf6f13707d14e3c2bea18048c4e37642e5cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:29:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:29:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d"} {"level":"info","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1eddda6d459b295395471a559ae4bf6f13707d14e3c2bea18048c4e37642e5cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:29:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:29:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1eddda6d459b295395471a559ae4bf6f13707d14e3c2bea18048c4e37642e5cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:29:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:29:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eddda6d459b295395471a559ae4bf6f13707d14e3c2bea18048c4e37642e5cd"} {"level":"error","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:29:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:29:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:29:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:29:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1eddda6d459b295395471a559ae4bf6f13707d14e3c2bea18048c4e37642e5cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:29:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:29:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1eddda6d459b295395471a559ae4bf6f13707d14e3c2bea18048c4e37642e5cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d"} {"level":"info","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1eddda6d459b295395471a559ae4bf6f13707d14e3c2bea18048c4e37642e5cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1eddda6d459b295395471a559ae4bf6f13707d14e3c2bea18048c4e37642e5cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d"} {"level":"info","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eddda6d459b295395471a559ae4bf6f13707d14e3c2bea18048c4e37642e5cd"} {"level":"debug","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:29:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:29:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:29:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:29:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d"} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d"} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d"} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d"} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1a2fca23058889693cce44674641402a52c20cbbf42198760f2fc4ef0dd0516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1a2fca23058889693cce44674641402a52c20cbbf42198760f2fc4ef0dd0516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1a2fca23058889693cce44674641402a52c20cbbf42198760f2fc4ef0dd0516"} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1a2fca23058889693cce44674641402a52c20cbbf42198760f2fc4ef0dd0516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1a2fca23058889693cce44674641402a52c20cbbf42198760f2fc4ef0dd0516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1a2fca23058889693cce44674641402a52c20cbbf42198760f2fc4ef0dd0516","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1a2fca23058889693cce44674641402a52c20cbbf42198760f2fc4ef0dd0516"} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1a2fca23058889693cce44674641402a52c20cbbf42198760f2fc4ef0dd0516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1a2fca23058889693cce44674641402a52c20cbbf42198760f2fc4ef0dd0516"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d"} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1a2fca23058889693cce44674641402a52c20cbbf42198760f2fc4ef0dd0516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1a2fca23058889693cce44674641402a52c20cbbf42198760f2fc4ef0dd0516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1a2fca23058889693cce44674641402a52c20cbbf42198760f2fc4ef0dd0516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1a2fca23058889693cce44674641402a52c20cbbf42198760f2fc4ef0dd0516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1a2fca23058889693cce44674641402a52c20cbbf42198760f2fc4ef0dd0516","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1a2fca23058889693cce44674641402a52c20cbbf42198760f2fc4ef0dd0516"} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1a2fca23058889693cce44674641402a52c20cbbf42198760f2fc4ef0dd0516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1a2fca23058889693cce44674641402a52c20cbbf42198760f2fc4ef0dd0516"} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1a2fca23058889693cce44674641402a52c20cbbf42198760f2fc4ef0dd0516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1a2fca23058889693cce44674641402a52c20cbbf42198760f2fc4ef0dd0516"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1a2fca23058889693cce44674641402a52c20cbbf42198760f2fc4ef0dd0516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1a2fca23058889693cce44674641402a52c20cbbf42198760f2fc4ef0dd0516","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1a2fca23058889693cce44674641402a52c20cbbf42198760f2fc4ef0dd0516"} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38d9bae64fe54c9ea675707bc5b247dfa2817eb3f6d64c6ecca777a451e94a56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38d9bae64fe54c9ea675707bc5b247dfa2817eb3f6d64c6ecca777a451e94a56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38d9bae64fe54c9ea675707bc5b247dfa2817eb3f6d64c6ecca777a451e94a56","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38d9bae64fe54c9ea675707bc5b247dfa2817eb3f6d64c6ecca777a451e94a56"} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38d9bae64fe54c9ea675707bc5b247dfa2817eb3f6d64c6ecca777a451e94a56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38d9bae64fe54c9ea675707bc5b247dfa2817eb3f6d64c6ecca777a451e94a56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38d9bae64fe54c9ea675707bc5b247dfa2817eb3f6d64c6ecca777a451e94a56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38d9bae64fe54c9ea675707bc5b247dfa2817eb3f6d64c6ecca777a451e94a56","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38d9bae64fe54c9ea675707bc5b247dfa2817eb3f6d64c6ecca777a451e94a56"} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"262624894acafba69c251a1ae347d25872fabe56bd174adb71221c931cab5e4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"262624894acafba69c251a1ae347d25872fabe56bd174adb71221c931cab5e4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"262624894acafba69c251a1ae347d25872fabe56bd174adb71221c931cab5e4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"262624894acafba69c251a1ae347d25872fabe56bd174adb71221c931cab5e4b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/262624894acafba69c251a1ae347d25872fabe56bd174adb71221c931cab5e4b"} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"262624894acafba69c251a1ae347d25872fabe56bd174adb71221c931cab5e4b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/262624894acafba69c251a1ae347d25872fabe56bd174adb71221c931cab5e4b"} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"262624894acafba69c251a1ae347d25872fabe56bd174adb71221c931cab5e4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["262624894acafba69c251a1ae347d25872fabe56bd174adb71221c931cab5e4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"262624894acafba69c251a1ae347d25872fabe56bd174adb71221c931cab5e4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"262624894acafba69c251a1ae347d25872fabe56bd174adb71221c931cab5e4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"262624894acafba69c251a1ae347d25872fabe56bd174adb71221c931cab5e4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc2875fa11953cb56ffe9a8b1e9ae2eac0844823c15060e33c2f164e7af1a264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/262624894acafba69c251a1ae347d25872fabe56bd174adb71221c931cab5e4b"} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc2875fa11953cb56ffe9a8b1e9ae2eac0844823c15060e33c2f164e7af1a264","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"262624894acafba69c251a1ae347d25872fabe56bd174adb71221c931cab5e4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["262624894acafba69c251a1ae347d25872fabe56bd174adb71221c931cab5e4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"262624894acafba69c251a1ae347d25872fabe56bd174adb71221c931cab5e4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db5262dfb4dd4dae2df816f397482a4f55e5788e2464f410fb424f9cc4a591d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc2875fa11953cb56ffe9a8b1e9ae2eac0844823c15060e33c2f164e7af1a264"} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db5262dfb4dd4dae2df816f397482a4f55e5788e2464f410fb424f9cc4a591d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc2875fa11953cb56ffe9a8b1e9ae2eac0844823c15060e33c2f164e7af1a264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc2875fa11953cb56ffe9a8b1e9ae2eac0844823c15060e33c2f164e7af1a264"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db5262dfb4dd4dae2df816f397482a4f55e5788e2464f410fb424f9cc4a591d2"} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc2875fa11953cb56ffe9a8b1e9ae2eac0844823c15060e33c2f164e7af1a264","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"262624894acafba69c251a1ae347d25872fabe56bd174adb71221c931cab5e4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"262624894acafba69c251a1ae347d25872fabe56bd174adb71221c931cab5e4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db5262dfb4dd4dae2df816f397482a4f55e5788e2464f410fb424f9cc4a591d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db5262dfb4dd4dae2df816f397482a4f55e5788e2464f410fb424f9cc4a591d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/262624894acafba69c251a1ae347d25872fabe56bd174adb71221c931cab5e4b"} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db5262dfb4dd4dae2df816f397482a4f55e5788e2464f410fb424f9cc4a591d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc2875fa11953cb56ffe9a8b1e9ae2eac0844823c15060e33c2f164e7af1a264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc2875fa11953cb56ffe9a8b1e9ae2eac0844823c15060e33c2f164e7af1a264","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"262624894acafba69c251a1ae347d25872fabe56bd174adb71221c931cab5e4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["262624894acafba69c251a1ae347d25872fabe56bd174adb71221c931cab5e4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc2875fa11953cb56ffe9a8b1e9ae2eac0844823c15060e33c2f164e7af1a264"} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"262624894acafba69c251a1ae347d25872fabe56bd174adb71221c931cab5e4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db5262dfb4dd4dae2df816f397482a4f55e5788e2464f410fb424f9cc4a591d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db5262dfb4dd4dae2df816f397482a4f55e5788e2464f410fb424f9cc4a591d2"} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db5262dfb4dd4dae2df816f397482a4f55e5788e2464f410fb424f9cc4a591d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc2875fa11953cb56ffe9a8b1e9ae2eac0844823c15060e33c2f164e7af1a264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc2875fa11953cb56ffe9a8b1e9ae2eac0844823c15060e33c2f164e7af1a264"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc2875fa11953cb56ffe9a8b1e9ae2eac0844823c15060e33c2f164e7af1a264","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"262624894acafba69c251a1ae347d25872fabe56bd174adb71221c931cab5e4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/262624894acafba69c251a1ae347d25872fabe56bd174adb71221c931cab5e4b"} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"262624894acafba69c251a1ae347d25872fabe56bd174adb71221c931cab5e4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db5262dfb4dd4dae2df816f397482a4f55e5788e2464f410fb424f9cc4a591d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db5262dfb4dd4dae2df816f397482a4f55e5788e2464f410fb424f9cc4a591d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db5262dfb4dd4dae2df816f397482a4f55e5788e2464f410fb424f9cc4a591d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc2875fa11953cb56ffe9a8b1e9ae2eac0844823c15060e33c2f164e7af1a264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc2875fa11953cb56ffe9a8b1e9ae2eac0844823c15060e33c2f164e7af1a264","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"262624894acafba69c251a1ae347d25872fabe56bd174adb71221c931cab5e4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["262624894acafba69c251a1ae347d25872fabe56bd174adb71221c931cab5e4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc2875fa11953cb56ffe9a8b1e9ae2eac0844823c15060e33c2f164e7af1a264"} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"262624894acafba69c251a1ae347d25872fabe56bd174adb71221c931cab5e4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db5262dfb4dd4dae2df816f397482a4f55e5788e2464f410fb424f9cc4a591d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db5262dfb4dd4dae2df816f397482a4f55e5788e2464f410fb424f9cc4a591d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ac703be776d66a6f7773c15c3d671626bb1f094034d8914101858d24ca6d890","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db5262dfb4dd4dae2df816f397482a4f55e5788e2464f410fb424f9cc4a591d2"} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ac703be776d66a6f7773c15c3d671626bb1f094034d8914101858d24ca6d890","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc2875fa11953cb56ffe9a8b1e9ae2eac0844823c15060e33c2f164e7af1a264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc2875fa11953cb56ffe9a8b1e9ae2eac0844823c15060e33c2f164e7af1a264"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc2875fa11953cb56ffe9a8b1e9ae2eac0844823c15060e33c2f164e7af1a264","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"262624894acafba69c251a1ae347d25872fabe56bd174adb71221c931cab5e4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/262624894acafba69c251a1ae347d25872fabe56bd174adb71221c931cab5e4b"} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"262624894acafba69c251a1ae347d25872fabe56bd174adb71221c931cab5e4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db5262dfb4dd4dae2df816f397482a4f55e5788e2464f410fb424f9cc4a591d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db5262dfb4dd4dae2df816f397482a4f55e5788e2464f410fb424f9cc4a591d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ac703be776d66a6f7773c15c3d671626bb1f094034d8914101858d24ca6d890"} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db5262dfb4dd4dae2df816f397482a4f55e5788e2464f410fb424f9cc4a591d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ac703be776d66a6f7773c15c3d671626bb1f094034d8914101858d24ca6d890","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ac703be776d66a6f7773c15c3d671626bb1f094034d8914101858d24ca6d890"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ac703be776d66a6f7773c15c3d671626bb1f094034d8914101858d24ca6d890","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc2875fa11953cb56ffe9a8b1e9ae2eac0844823c15060e33c2f164e7af1a264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc2875fa11953cb56ffe9a8b1e9ae2eac0844823c15060e33c2f164e7af1a264"} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc2875fa11953cb56ffe9a8b1e9ae2eac0844823c15060e33c2f164e7af1a264","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"262624894acafba69c251a1ae347d25872fabe56bd174adb71221c931cab5e4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["262624894acafba69c251a1ae347d25872fabe56bd174adb71221c931cab5e4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"262624894acafba69c251a1ae347d25872fabe56bd174adb71221c931cab5e4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87c09ed44f57f9292c13af66cf36b9fe199c4cd44eb312ec7e4ffa929f9d4e2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87c09ed44f57f9292c13af66cf36b9fe199c4cd44eb312ec7e4ffa929f9d4e2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db5262dfb4dd4dae2df816f397482a4f55e5788e2464f410fb424f9cc4a591d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db5262dfb4dd4dae2df816f397482a4f55e5788e2464f410fb424f9cc4a591d2"} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db5262dfb4dd4dae2df816f397482a4f55e5788e2464f410fb424f9cc4a591d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ac703be776d66a6f7773c15c3d671626bb1f094034d8914101858d24ca6d890","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc2875fa11953cb56ffe9a8b1e9ae2eac0844823c15060e33c2f164e7af1a264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:29:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:29:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc2875fa11953cb56ffe9a8b1e9ae2eac0844823c15060e33c2f164e7af1a264"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc2875fa11953cb56ffe9a8b1e9ae2eac0844823c15060e33c2f164e7af1a264","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"262624894acafba69c251a1ae347d25872fabe56bd174adb71221c931cab5e4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:29:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:29:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/262624894acafba69c251a1ae347d25872fabe56bd174adb71221c931cab5e4b"} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"262624894acafba69c251a1ae347d25872fabe56bd174adb71221c931cab5e4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87c09ed44f57f9292c13af66cf36b9fe199c4cd44eb312ec7e4ffa929f9d4e2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:29:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87c09ed44f57f9292c13af66cf36b9fe199c4cd44eb312ec7e4ffa929f9d4e2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db5262dfb4dd4dae2df816f397482a4f55e5788e2464f410fb424f9cc4a591d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:29:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:29:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db5262dfb4dd4dae2df816f397482a4f55e5788e2464f410fb424f9cc4a591d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87c09ed44f57f9292c13af66cf36b9fe199c4cd44eb312ec7e4ffa929f9d4e2b"} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db5262dfb4dd4dae2df816f397482a4f55e5788e2464f410fb424f9cc4a591d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc2875fa11953cb56ffe9a8b1e9ae2eac0844823c15060e33c2f164e7af1a264","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:29:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:29:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ac703be776d66a6f7773c15c3d671626bb1f094034d8914101858d24ca6d890"} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"262624894acafba69c251a1ae347d25872fabe56bd174adb71221c931cab5e4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:29:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:29:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["262624894acafba69c251a1ae347d25872fabe56bd174adb71221c931cab5e4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc2875fa11953cb56ffe9a8b1e9ae2eac0844823c15060e33c2f164e7af1a264"} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"262624894acafba69c251a1ae347d25872fabe56bd174adb71221c931cab5e4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87c09ed44f57f9292c13af66cf36b9fe199c4cd44eb312ec7e4ffa929f9d4e2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:29:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:29:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87c09ed44f57f9292c13af66cf36b9fe199c4cd44eb312ec7e4ffa929f9d4e2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db5262dfb4dd4dae2df816f397482a4f55e5788e2464f410fb424f9cc4a591d2"} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627"} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/262624894acafba69c251a1ae347d25872fabe56bd174adb71221c931cab5e4b"} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87c09ed44f57f9292c13af66cf36b9fe199c4cd44eb312ec7e4ffa929f9d4e2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db5262dfb4dd4dae2df816f397482a4f55e5788e2464f410fb424f9cc4a591d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:29:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:29:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87c09ed44f57f9292c13af66cf36b9fe199c4cd44eb312ec7e4ffa929f9d4e2b"} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87c09ed44f57f9292c13af66cf36b9fe199c4cd44eb312ec7e4ffa929f9d4e2b"} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"262624894acafba69c251a1ae347d25872fabe56bd174adb71221c931cab5e4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87c09ed44f57f9292c13af66cf36b9fe199c4cd44eb312ec7e4ffa929f9d4e2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c954eb52d50bc15d271918140fcc8e30aa07800f6f191be3aa94b08859f61b3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:29:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:29:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c954eb52d50bc15d271918140fcc8e30aa07800f6f191be3aa94b08859f61b3f"} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c881ca15369514375279ee06e499bfe0c6290dfb50526e1a1e8a48defcf0de6"} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c954eb52d50bc15d271918140fcc8e30aa07800f6f191be3aa94b08859f61b3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c881ca15369514375279ee06e499bfe0c6290dfb50526e1a1e8a48defcf0de6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:29:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:29:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c881ca15369514375279ee06e499bfe0c6290dfb50526e1a1e8a48defcf0de6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627"} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c954eb52d50bc15d271918140fcc8e30aa07800f6f191be3aa94b08859f61b3f"} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c881ca15369514375279ee06e499bfe0c6290dfb50526e1a1e8a48defcf0de6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c954eb52d50bc15d271918140fcc8e30aa07800f6f191be3aa94b08859f61b3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:29:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:29:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c954eb52d50bc15d271918140fcc8e30aa07800f6f191be3aa94b08859f61b3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2175f018302ca078fd26849ee7dcfa524696bc507e3a27249fd57a372e578a2c"} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cfda08bbe096b2ff41428e32a1e3b1f2572442ef7df7b247613e75876a7d9d3"} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c954eb52d50bc15d271918140fcc8e30aa07800f6f191be3aa94b08859f61b3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2175f018302ca078fd26849ee7dcfa524696bc507e3a27249fd57a372e578a2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:29:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:29:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2175f018302ca078fd26849ee7dcfa524696bc507e3a27249fd57a372e578a2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c881ca15369514375279ee06e499bfe0c6290dfb50526e1a1e8a48defcf0de6"} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e232fde2d13b893bf10d644a6fd69f8319382ae68be0af767a3604b8b71da415"} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2175f018302ca078fd26849ee7dcfa524696bc507e3a27249fd57a372e578a2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cfda08bbe096b2ff41428e32a1e3b1f2572442ef7df7b247613e75876a7d9d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:29:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:29:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cfda08bbe096b2ff41428e32a1e3b1f2572442ef7df7b247613e75876a7d9d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c954eb52d50bc15d271918140fcc8e30aa07800f6f191be3aa94b08859f61b3f"} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7289f7eaf1a78f746650bb59360fe0b4da3cdace03bc38a7a2a275d0dab2a2c"} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8d0686a50e7d1402fdd8dd17bc7b97614fd40cbff4191fa210bb147ad2f45a6"} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cfda08bbe096b2ff41428e32a1e3b1f2572442ef7df7b247613e75876a7d9d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c881ca15369514375279ee06e499bfe0c6290dfb50526e1a1e8a48defcf0de6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e232fde2d13b893bf10d644a6fd69f8319382ae68be0af767a3604b8b71da415","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:29:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:29:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e232fde2d13b893bf10d644a6fd69f8319382ae68be0af767a3604b8b71da415"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2175f018302ca078fd26849ee7dcfa524696bc507e3a27249fd57a372e578a2c"} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/501d25ebfe6cc9235804b6371b2b3359283b884a286beeb081da0a6a7e16b65d"} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e232fde2d13b893bf10d644a6fd69f8319382ae68be0af767a3604b8b71da415","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c954eb52d50bc15d271918140fcc8e30aa07800f6f191be3aa94b08859f61b3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7289f7eaf1a78f746650bb59360fe0b4da3cdace03bc38a7a2a275d0dab2a2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:29:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:29:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7289f7eaf1a78f746650bb59360fe0b4da3cdace03bc38a7a2a275d0dab2a2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cfda08bbe096b2ff41428e32a1e3b1f2572442ef7df7b247613e75876a7d9d3"} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9"} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7289f7eaf1a78f746650bb59360fe0b4da3cdace03bc38a7a2a275d0dab2a2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8d0686a50e7d1402fdd8dd17bc7b97614fd40cbff4191fa210bb147ad2f45a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:29:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:29:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8d0686a50e7d1402fdd8dd17bc7b97614fd40cbff4191fa210bb147ad2f45a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51721dec77defe6d73bf0e1f3edf097bd684adbc2aa98ffc87577162ab532e39"} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e232fde2d13b893bf10d644a6fd69f8319382ae68be0af767a3604b8b71da415"} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8d0686a50e7d1402fdd8dd17bc7b97614fd40cbff4191fa210bb147ad2f45a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2175f018302ca078fd26849ee7dcfa524696bc507e3a27249fd57a372e578a2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"501d25ebfe6cc9235804b6371b2b3359283b884a286beeb081da0a6a7e16b65d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:29:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:29:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["501d25ebfe6cc9235804b6371b2b3359283b884a286beeb081da0a6a7e16b65d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/541fb392bb97327dc263a5e6f9814010ef3b99857e0f3cd6055caae7cbf223d4"} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7289f7eaf1a78f746650bb59360fe0b4da3cdace03bc38a7a2a275d0dab2a2c"} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"501d25ebfe6cc9235804b6371b2b3359283b884a286beeb081da0a6a7e16b65d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cfda08bbe096b2ff41428e32a1e3b1f2572442ef7df7b247613e75876a7d9d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:29:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:29:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0"} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a49d36af439da6929b789ff09c9b99ccd85d01ff7fd730be5e93c61ffbc2f3c4"} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8d0686a50e7d1402fdd8dd17bc7b97614fd40cbff4191fa210bb147ad2f45a6"} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51721dec77defe6d73bf0e1f3edf097bd684adbc2aa98ffc87577162ab532e39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:29:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:29:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51721dec77defe6d73bf0e1f3edf097bd684adbc2aa98ffc87577162ab532e39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/501d25ebfe6cc9235804b6371b2b3359283b884a286beeb081da0a6a7e16b65d"} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9"} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51721dec77defe6d73bf0e1f3edf097bd684adbc2aa98ffc87577162ab532e39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e232fde2d13b893bf10d644a6fd69f8319382ae68be0af767a3604b8b71da415","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"541fb392bb97327dc263a5e6f9814010ef3b99857e0f3cd6055caae7cbf223d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:29:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:29:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["541fb392bb97327dc263a5e6f9814010ef3b99857e0f3cd6055caae7cbf223d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51721dec77defe6d73bf0e1f3edf097bd684adbc2aa98ffc87577162ab532e39"} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"541fb392bb97327dc263a5e6f9814010ef3b99857e0f3cd6055caae7cbf223d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7289f7eaf1a78f746650bb59360fe0b4da3cdace03bc38a7a2a275d0dab2a2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:29:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:29:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/541fb392bb97327dc263a5e6f9814010ef3b99857e0f3cd6055caae7cbf223d4"} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a49d36af439da6929b789ff09c9b99ccd85d01ff7fd730be5e93c61ffbc2f3c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:29:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:29:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a49d36af439da6929b789ff09c9b99ccd85d01ff7fd730be5e93c61ffbc2f3c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0"} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a49d36af439da6929b789ff09c9b99ccd85d01ff7fd730be5e93c61ffbc2f3c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8d0686a50e7d1402fdd8dd17bc7b97614fd40cbff4191fa210bb147ad2f45a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"501d25ebfe6cc9235804b6371b2b3359283b884a286beeb081da0a6a7e16b65d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51721dec77defe6d73bf0e1f3edf097bd684adbc2aa98ffc87577162ab532e39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"541fb392bb97327dc263a5e6f9814010ef3b99857e0f3cd6055caae7cbf223d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a49d36af439da6929b789ff09c9b99ccd85d01ff7fd730be5e93c61ffbc2f3c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:29:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:29:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a49d36af439da6929b789ff09c9b99ccd85d01ff7fd730be5e93c61ffbc2f3c4"} {"level":"info","ts":"2026-07-21T14:29:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a49d36af439da6929b789ff09c9b99ccd85d01ff7fd730be5e93c61ffbc2f3c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a49d36af439da6929b789ff09c9b99ccd85d01ff7fd730be5e93c61ffbc2f3c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a49d36af439da6929b789ff09c9b99ccd85d01ff7fd730be5e93c61ffbc2f3c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:29:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a49d36af439da6929b789ff09c9b99ccd85d01ff7fd730be5e93c61ffbc2f3c4"} {"level":"debug","ts":"2026-07-21T14:29:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a49d36af439da6929b789ff09c9b99ccd85d01ff7fd730be5e93c61ffbc2f3c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:29:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:29:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a49d36af439da6929b789ff09c9b99ccd85d01ff7fd730be5e93c61ffbc2f3c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a49d36af439da6929b789ff09c9b99ccd85d01ff7fd730be5e93c61ffbc2f3c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a49d36af439da6929b789ff09c9b99ccd85d01ff7fd730be5e93c61ffbc2f3c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T14:29:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T14:29:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a49d36af439da6929b789ff09c9b99ccd85d01ff7fd730be5e93c61ffbc2f3c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a49d36af439da6929b789ff09c9b99ccd85d01ff7fd730be5e93c61ffbc2f3c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a49d36af439da6929b789ff09c9b99ccd85d01ff7fd730be5e93c61ffbc2f3c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:29:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a49d36af439da6929b789ff09c9b99ccd85d01ff7fd730be5e93c61ffbc2f3c4"} {"level":"debug","ts":"2026-07-21T14:29:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a49d36af439da6929b789ff09c9b99ccd85d01ff7fd730be5e93c61ffbc2f3c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a49d36af439da6929b789ff09c9b99ccd85d01ff7fd730be5e93c61ffbc2f3c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:29:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a49d36af439da6929b789ff09c9b99ccd85d01ff7fd730be5e93c61ffbc2f3c4"} {"level":"debug","ts":"2026-07-21T14:29:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a49d36af439da6929b789ff09c9b99ccd85d01ff7fd730be5e93c61ffbc2f3c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T14:29:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T14:29:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a49d36af439da6929b789ff09c9b99ccd85d01ff7fd730be5e93c61ffbc2f3c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T14:29:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a49d36af439da6929b789ff09c9b99ccd85d01ff7fd730be5e93c61ffbc2f3c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T14:29:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a49d36af439da6929b789ff09c9b99ccd85d01ff7fd730be5e93c61ffbc2f3c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T14:29:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a49d36af439da6929b789ff09c9b99ccd85d01ff7fd730be5e93c61ffbc2f3c4"} {"level":"info","ts":"2026-07-21T14:29:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"500d18ea-fdb3-4278-9184-1bdda76b86fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:39296","PortSpecifier":{"PortValue":39296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"500d18ea-fdb3-4278-9184-1bdda76b86fc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T14:29:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"500d18ea-fdb3-4278-9184-1bdda76b86fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:39296","PortSpecifier":{"PortValue":39296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784644149,"nanos":996314548},"http":{"id":"500d18ea-fdb3-4278-9184-1bdda76b86fc","method":"POST","headers":{":authority":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:29:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"500d18ea-fdb3-4278-9184-1bdda76b86fc","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T14:29:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"500d18ea-fdb3-4278-9184-1bdda76b86fc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c9d8e713-ec08-4892-a56e-7b129733ef25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=69bd14ba-7c3b-4214-abdc-648afc7bb592"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f501dc36bfbb"]}} {"level":"debug","ts":"2026-07-21T14:29:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"500d18ea-fdb3-4278-9184-1bdda76b86fc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f501dc36bfbb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=69bd14ba-7c3b-4214-abdc-648afc7bb592"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c9d8e713-ec08-4892-a56e-7b129733ef25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e8d0686a50e7d1402fdd8dd17bc7b97614fd40cbff4191fa210bb147ad2f45a6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:29:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"500d18ea-fdb3-4278-9184-1bdda76b86fc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"500d18ea-fdb3-4278-9184-1bdda76b86fc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"500d18ea-fdb3-4278-9184-1bdda76b86fc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-67be07/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"500d18ea-fdb3-4278-9184-1bdda76b86fc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T14:29:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"500d18ea-fdb3-4278-9184-1bdda76b86fc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T14:29:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"500d18ea-fdb3-4278-9184-1bdda76b86fc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-21T14:29:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"500d18ea-fdb3-4278-9184-1bdda76b86fc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T14:29:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"500d18ea-fdb3-4278-9184-1bdda76b86fc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T14:29:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a0d73b9-d716-4b82-87b3-9888f08c7f28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:47824","PortSpecifier":{"PortValue":47824}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5a0d73b9-d716-4b82-87b3-9888f08c7f28","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-52967c.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T14:29:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a0d73b9-d716-4b82-87b3-9888f08c7f28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:47824","PortSpecifier":{"PortValue":47824}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784644150,"nanos":44227920},"http":{"id":"5a0d73b9-d716-4b82-87b3-9888f08c7f28","method":"POST","headers":{":authority":"e2e-shared-b-52967c.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:29:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5a0d73b9-d716-4b82-87b3-9888f08c7f28","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T14:29:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5a0d73b9-d716-4b82-87b3-9888f08c7f28","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c9d8e713-ec08-4892-a56e-7b129733ef25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=69bd14ba-7c3b-4214-abdc-648afc7bb592"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f501dc36bfbb"]}} {"level":"debug","ts":"2026-07-21T14:29:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5a0d73b9-d716-4b82-87b3-9888f08c7f28","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f501dc36bfbb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=69bd14ba-7c3b-4214-abdc-648afc7bb592"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c9d8e713-ec08-4892-a56e-7b129733ef25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-52967c.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:29:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a0d73b9-d716-4b82-87b3-9888f08c7f28","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a0d73b9-d716-4b82-87b3-9888f08c7f28","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a0d73b9-d716-4b82-87b3-9888f08c7f28","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-52967c/rate-test-model-52967c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-52967c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5a0d73b9-d716-4b82-87b3-9888f08c7f28","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T14:29:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a0d73b9-d716-4b82-87b3-9888f08c7f28","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T14:29:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a0d73b9-d716-4b82-87b3-9888f08c7f28","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T14:29:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a0d73b9-d716-4b82-87b3-9888f08c7f28","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T14:29:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a0d73b9-d716-4b82-87b3-9888f08c7f28","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T14:29:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"865843b6-85a5-4e61-9de5-ab01ef9e270d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:39302","PortSpecifier":{"PortValue":39302}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"865843b6-85a5-4e61-9de5-ab01ef9e270d","method":"POST","path":"/ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07/v1/completions","host":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T14:29:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"865843b6-85a5-4e61-9de5-ab01ef9e270d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:39302","PortSpecifier":{"PortValue":39302}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784644150,"nanos":91858223},"http":{"id":"865843b6-85a5-4e61-9de5-ab01ef9e270d","method":"POST","headers":{":authority":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:29:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"865843b6-85a5-4e61-9de5-ab01ef9e270d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ECPzLD5THELX5Rgb_kXWnwdvuKh2jJEyJRbAGV8JYBjjlPMDakGbp6JlErE2"} {"level":"debug","ts":"2026-07-21T14:29:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"865843b6-85a5-4e61-9de5-ab01ef9e270d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ECPzLD5THELX5Rgb_kXWnwdvuKh2jJEyJRbAGV8JYBjjlPMDakGbp6JlErE2\"}"} {"level":"debug","ts":"2026-07-21T14:29:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"865843b6-85a5-4e61-9de5-ab01ef9e270d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1e440ad6-d0a1-4768-876a-ac06899bbbfd","keyName":"e2e-rate-a-a673b3","subscription":"e2e-rate-iso-a-a673b3","tenant":"e2e-shared-a-67be07","userId":"1e440ad6-d0a1-4768-876a-ac06899bbbfd","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T14:29:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"865843b6-85a5-4e61-9de5-ab01ef9e270d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07\",\"requestedSubscription\":\"e2e-rate-iso-a-a673b3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T14:29:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"865843b6-85a5-4e61-9de5-ab01ef9e270d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-67be07","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a673b3","namespace":"ai-tenant-e2e-shared-a-67be07","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07"}} {"level":"debug","ts":"2026-07-21T14:29:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"865843b6-85a5-4e61-9de5-ab01ef9e270d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:29:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"865843b6-85a5-4e61-9de5-ab01ef9e270d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"865843b6-85a5-4e61-9de5-ab01ef9e270d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"865843b6-85a5-4e61-9de5-ab01ef9e270d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"865843b6-85a5-4e61-9de5-ab01ef9e270d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-67be07/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"865843b6-85a5-4e61-9de5-ab01ef9e270d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T14:29:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"865843b6-85a5-4e61-9de5-ab01ef9e270d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a673b3"} {"level":"debug","ts":"2026-07-21T14:29:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"865843b6-85a5-4e61-9de5-ab01ef9e270d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T14:29:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"865843b6-85a5-4e61-9de5-ab01ef9e270d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1e440ad6-d0a1-4768-876a-ac06899bbbfd","keyName":"e2e-rate-a-a673b3","selected_subscription":"e2e-rate-iso-a-a673b3","selected_subscription_key":"ai-tenant-e2e-shared-a-67be07/e2e-rate-iso-a-a673b3@ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-67be07","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a673b3","namespace":"ai-tenant-e2e-shared-a-67be07","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T14:29:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"865843b6-85a5-4e61-9de5-ab01ef9e270d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T14:29:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"865843b6-85a5-4e61-9de5-ab01ef9e270d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T14:29:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1226b641-2dc7-4679-8f2c-b6072648c242","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:39306","PortSpecifier":{"PortValue":39306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1226b641-2dc7-4679-8f2c-b6072648c242","method":"POST","path":"/ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07/v1/completions","host":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T14:29:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1226b641-2dc7-4679-8f2c-b6072648c242","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:39306","PortSpecifier":{"PortValue":39306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784644151,"nanos":153970218},"http":{"id":"1226b641-2dc7-4679-8f2c-b6072648c242","method":"POST","headers":{":authority":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:29:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1226b641-2dc7-4679-8f2c-b6072648c242","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ECPzLD5THELX5Rgb_kXWnwdvuKh2jJEyJRbAGV8JYBjjlPMDakGbp6JlErE2"} {"level":"debug","ts":"2026-07-21T14:29:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1226b641-2dc7-4679-8f2c-b6072648c242","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ECPzLD5THELX5Rgb_kXWnwdvuKh2jJEyJRbAGV8JYBjjlPMDakGbp6JlErE2\"}"} {"level":"debug","ts":"2026-07-21T14:29:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1226b641-2dc7-4679-8f2c-b6072648c242","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1e440ad6-d0a1-4768-876a-ac06899bbbfd","keyName":"e2e-rate-a-a673b3","subscription":"e2e-rate-iso-a-a673b3","tenant":"e2e-shared-a-67be07","userId":"1e440ad6-d0a1-4768-876a-ac06899bbbfd","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T14:29:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1226b641-2dc7-4679-8f2c-b6072648c242","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07\",\"requestedSubscription\":\"e2e-rate-iso-a-a673b3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T14:29:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1226b641-2dc7-4679-8f2c-b6072648c242","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-67be07","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a673b3","namespace":"ai-tenant-e2e-shared-a-67be07","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07"}} {"level":"debug","ts":"2026-07-21T14:29:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1226b641-2dc7-4679-8f2c-b6072648c242","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:29:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1226b641-2dc7-4679-8f2c-b6072648c242","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1226b641-2dc7-4679-8f2c-b6072648c242","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1226b641-2dc7-4679-8f2c-b6072648c242","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-67be07/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1226b641-2dc7-4679-8f2c-b6072648c242","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1226b641-2dc7-4679-8f2c-b6072648c242","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T14:29:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1226b641-2dc7-4679-8f2c-b6072648c242","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T14:29:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1226b641-2dc7-4679-8f2c-b6072648c242","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a673b3"} {"level":"debug","ts":"2026-07-21T14:29:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1226b641-2dc7-4679-8f2c-b6072648c242","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1e440ad6-d0a1-4768-876a-ac06899bbbfd","keyName":"e2e-rate-a-a673b3","selected_subscription":"e2e-rate-iso-a-a673b3","selected_subscription_key":"ai-tenant-e2e-shared-a-67be07/e2e-rate-iso-a-a673b3@ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-67be07","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a673b3","namespace":"ai-tenant-e2e-shared-a-67be07","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T14:29:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1226b641-2dc7-4679-8f2c-b6072648c242","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T14:29:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1226b641-2dc7-4679-8f2c-b6072648c242","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T14:29:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c947967d-a9a8-4660-a3bf-2c0791d47e22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:39316","PortSpecifier":{"PortValue":39316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c947967d-a9a8-4660-a3bf-2c0791d47e22","method":"POST","path":"/ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07/v1/completions","host":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T14:29:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c947967d-a9a8-4660-a3bf-2c0791d47e22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:39316","PortSpecifier":{"PortValue":39316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784644152,"nanos":192671277},"http":{"id":"c947967d-a9a8-4660-a3bf-2c0791d47e22","method":"POST","headers":{":authority":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:29:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c947967d-a9a8-4660-a3bf-2c0791d47e22","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ECPzLD5THELX5Rgb_kXWnwdvuKh2jJEyJRbAGV8JYBjjlPMDakGbp6JlErE2"} {"level":"debug","ts":"2026-07-21T14:29:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c947967d-a9a8-4660-a3bf-2c0791d47e22","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ECPzLD5THELX5Rgb_kXWnwdvuKh2jJEyJRbAGV8JYBjjlPMDakGbp6JlErE2\"}"} {"level":"debug","ts":"2026-07-21T14:29:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c947967d-a9a8-4660-a3bf-2c0791d47e22","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1e440ad6-d0a1-4768-876a-ac06899bbbfd","keyName":"e2e-rate-a-a673b3","subscription":"e2e-rate-iso-a-a673b3","tenant":"e2e-shared-a-67be07","userId":"1e440ad6-d0a1-4768-876a-ac06899bbbfd","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T14:29:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c947967d-a9a8-4660-a3bf-2c0791d47e22","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07\",\"requestedSubscription\":\"e2e-rate-iso-a-a673b3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T14:29:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c947967d-a9a8-4660-a3bf-2c0791d47e22","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-67be07","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a673b3","namespace":"ai-tenant-e2e-shared-a-67be07","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07"}} {"level":"debug","ts":"2026-07-21T14:29:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c947967d-a9a8-4660-a3bf-2c0791d47e22","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:29:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c947967d-a9a8-4660-a3bf-2c0791d47e22","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c947967d-a9a8-4660-a3bf-2c0791d47e22","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c947967d-a9a8-4660-a3bf-2c0791d47e22","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-67be07/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c947967d-a9a8-4660-a3bf-2c0791d47e22","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c947967d-a9a8-4660-a3bf-2c0791d47e22","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T14:29:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c947967d-a9a8-4660-a3bf-2c0791d47e22","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a673b3"} {"level":"debug","ts":"2026-07-21T14:29:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c947967d-a9a8-4660-a3bf-2c0791d47e22","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T14:29:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c947967d-a9a8-4660-a3bf-2c0791d47e22","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1e440ad6-d0a1-4768-876a-ac06899bbbfd","keyName":"e2e-rate-a-a673b3","selected_subscription":"e2e-rate-iso-a-a673b3","selected_subscription_key":"ai-tenant-e2e-shared-a-67be07/e2e-rate-iso-a-a673b3@ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-67be07","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a673b3","namespace":"ai-tenant-e2e-shared-a-67be07","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T14:29:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c947967d-a9a8-4660-a3bf-2c0791d47e22","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T14:29:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c947967d-a9a8-4660-a3bf-2c0791d47e22","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T14:29:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ebd6c27-17e5-4f06-9ad5-e9f3502f952e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:39326","PortSpecifier":{"PortValue":39326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2ebd6c27-17e5-4f06-9ad5-e9f3502f952e","method":"POST","path":"/ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07/v1/completions","host":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T14:29:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ebd6c27-17e5-4f06-9ad5-e9f3502f952e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:39326","PortSpecifier":{"PortValue":39326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784644153,"nanos":231661036},"http":{"id":"2ebd6c27-17e5-4f06-9ad5-e9f3502f952e","method":"POST","headers":{":authority":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:29:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2ebd6c27-17e5-4f06-9ad5-e9f3502f952e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ECPzLD5THELX5Rgb_kXWnwdvuKh2jJEyJRbAGV8JYBjjlPMDakGbp6JlErE2"} {"level":"debug","ts":"2026-07-21T14:29:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2ebd6c27-17e5-4f06-9ad5-e9f3502f952e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ECPzLD5THELX5Rgb_kXWnwdvuKh2jJEyJRbAGV8JYBjjlPMDakGbp6JlErE2\"}"} {"level":"debug","ts":"2026-07-21T14:29:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2ebd6c27-17e5-4f06-9ad5-e9f3502f952e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1e440ad6-d0a1-4768-876a-ac06899bbbfd","keyName":"e2e-rate-a-a673b3","subscription":"e2e-rate-iso-a-a673b3","tenant":"e2e-shared-a-67be07","userId":"1e440ad6-d0a1-4768-876a-ac06899bbbfd","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T14:29:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2ebd6c27-17e5-4f06-9ad5-e9f3502f952e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07\",\"requestedSubscription\":\"e2e-rate-iso-a-a673b3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T14:29:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2ebd6c27-17e5-4f06-9ad5-e9f3502f952e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-67be07","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a673b3","namespace":"ai-tenant-e2e-shared-a-67be07","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07"}} {"level":"debug","ts":"2026-07-21T14:29:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2ebd6c27-17e5-4f06-9ad5-e9f3502f952e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:29:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ebd6c27-17e5-4f06-9ad5-e9f3502f952e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ebd6c27-17e5-4f06-9ad5-e9f3502f952e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ebd6c27-17e5-4f06-9ad5-e9f3502f952e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-67be07/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ebd6c27-17e5-4f06-9ad5-e9f3502f952e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ebd6c27-17e5-4f06-9ad5-e9f3502f952e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T14:29:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ebd6c27-17e5-4f06-9ad5-e9f3502f952e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T14:29:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ebd6c27-17e5-4f06-9ad5-e9f3502f952e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a673b3"} {"level":"debug","ts":"2026-07-21T14:29:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ebd6c27-17e5-4f06-9ad5-e9f3502f952e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1e440ad6-d0a1-4768-876a-ac06899bbbfd","keyName":"e2e-rate-a-a673b3","selected_subscription":"e2e-rate-iso-a-a673b3","selected_subscription_key":"ai-tenant-e2e-shared-a-67be07/e2e-rate-iso-a-a673b3@ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-67be07","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a673b3","namespace":"ai-tenant-e2e-shared-a-67be07","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T14:29:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ebd6c27-17e5-4f06-9ad5-e9f3502f952e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T14:29:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ebd6c27-17e5-4f06-9ad5-e9f3502f952e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T14:29:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61fed81e-8f33-430a-84e0-6572ddfa520f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:39336","PortSpecifier":{"PortValue":39336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"61fed81e-8f33-430a-84e0-6572ddfa520f","method":"POST","path":"/ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07/v1/completions","host":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T14:29:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61fed81e-8f33-430a-84e0-6572ddfa520f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:39336","PortSpecifier":{"PortValue":39336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784644154,"nanos":269427270},"http":{"id":"61fed81e-8f33-430a-84e0-6572ddfa520f","method":"POST","headers":{":authority":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:29:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"61fed81e-8f33-430a-84e0-6572ddfa520f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ECPzLD5THELX5Rgb_kXWnwdvuKh2jJEyJRbAGV8JYBjjlPMDakGbp6JlErE2"} {"level":"debug","ts":"2026-07-21T14:29:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"61fed81e-8f33-430a-84e0-6572ddfa520f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ECPzLD5THELX5Rgb_kXWnwdvuKh2jJEyJRbAGV8JYBjjlPMDakGbp6JlErE2\"}"} {"level":"debug","ts":"2026-07-21T14:29:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"61fed81e-8f33-430a-84e0-6572ddfa520f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1e440ad6-d0a1-4768-876a-ac06899bbbfd","keyName":"e2e-rate-a-a673b3","subscription":"e2e-rate-iso-a-a673b3","tenant":"e2e-shared-a-67be07","userId":"1e440ad6-d0a1-4768-876a-ac06899bbbfd","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T14:29:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"61fed81e-8f33-430a-84e0-6572ddfa520f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07\",\"requestedSubscription\":\"e2e-rate-iso-a-a673b3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T14:29:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"61fed81e-8f33-430a-84e0-6572ddfa520f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-67be07","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a673b3","namespace":"ai-tenant-e2e-shared-a-67be07","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07"}} {"level":"debug","ts":"2026-07-21T14:29:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"61fed81e-8f33-430a-84e0-6572ddfa520f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:29:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61fed81e-8f33-430a-84e0-6572ddfa520f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61fed81e-8f33-430a-84e0-6572ddfa520f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61fed81e-8f33-430a-84e0-6572ddfa520f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61fed81e-8f33-430a-84e0-6572ddfa520f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-67be07/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61fed81e-8f33-430a-84e0-6572ddfa520f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a673b3"} {"level":"debug","ts":"2026-07-21T14:29:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61fed81e-8f33-430a-84e0-6572ddfa520f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T14:29:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61fed81e-8f33-430a-84e0-6572ddfa520f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T14:29:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61fed81e-8f33-430a-84e0-6572ddfa520f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1e440ad6-d0a1-4768-876a-ac06899bbbfd","keyName":"e2e-rate-a-a673b3","selected_subscription":"e2e-rate-iso-a-a673b3","selected_subscription_key":"ai-tenant-e2e-shared-a-67be07/e2e-rate-iso-a-a673b3@ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-67be07","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a673b3","namespace":"ai-tenant-e2e-shared-a-67be07","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T14:29:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61fed81e-8f33-430a-84e0-6572ddfa520f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T14:29:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61fed81e-8f33-430a-84e0-6572ddfa520f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T14:29:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44522e5f-4f0f-440e-bc6a-494e411b6fbe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:39346","PortSpecifier":{"PortValue":39346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"44522e5f-4f0f-440e-bc6a-494e411b6fbe","method":"POST","path":"/ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07/v1/completions","host":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T14:29:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44522e5f-4f0f-440e-bc6a-494e411b6fbe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:39346","PortSpecifier":{"PortValue":39346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784644155,"nanos":319349741},"http":{"id":"44522e5f-4f0f-440e-bc6a-494e411b6fbe","method":"POST","headers":{":authority":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:29:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"44522e5f-4f0f-440e-bc6a-494e411b6fbe","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ECPzLD5THELX5Rgb_kXWnwdvuKh2jJEyJRbAGV8JYBjjlPMDakGbp6JlErE2"} {"level":"debug","ts":"2026-07-21T14:29:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"44522e5f-4f0f-440e-bc6a-494e411b6fbe","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ECPzLD5THELX5Rgb_kXWnwdvuKh2jJEyJRbAGV8JYBjjlPMDakGbp6JlErE2\"}"} {"level":"debug","ts":"2026-07-21T14:29:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"44522e5f-4f0f-440e-bc6a-494e411b6fbe","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1e440ad6-d0a1-4768-876a-ac06899bbbfd","keyName":"e2e-rate-a-a673b3","subscription":"e2e-rate-iso-a-a673b3","tenant":"e2e-shared-a-67be07","userId":"1e440ad6-d0a1-4768-876a-ac06899bbbfd","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T14:29:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"44522e5f-4f0f-440e-bc6a-494e411b6fbe","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07\",\"requestedSubscription\":\"e2e-rate-iso-a-a673b3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T14:29:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"44522e5f-4f0f-440e-bc6a-494e411b6fbe","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-67be07","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a673b3","namespace":"ai-tenant-e2e-shared-a-67be07","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07"}} {"level":"debug","ts":"2026-07-21T14:29:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"44522e5f-4f0f-440e-bc6a-494e411b6fbe","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:29:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44522e5f-4f0f-440e-bc6a-494e411b6fbe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44522e5f-4f0f-440e-bc6a-494e411b6fbe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44522e5f-4f0f-440e-bc6a-494e411b6fbe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-67be07/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44522e5f-4f0f-440e-bc6a-494e411b6fbe","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44522e5f-4f0f-440e-bc6a-494e411b6fbe","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T14:29:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44522e5f-4f0f-440e-bc6a-494e411b6fbe","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a673b3"} {"level":"debug","ts":"2026-07-21T14:29:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44522e5f-4f0f-440e-bc6a-494e411b6fbe","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T14:29:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44522e5f-4f0f-440e-bc6a-494e411b6fbe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1e440ad6-d0a1-4768-876a-ac06899bbbfd","keyName":"e2e-rate-a-a673b3","selected_subscription":"e2e-rate-iso-a-a673b3","selected_subscription_key":"ai-tenant-e2e-shared-a-67be07/e2e-rate-iso-a-a673b3@ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-67be07","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a673b3","namespace":"ai-tenant-e2e-shared-a-67be07","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T14:29:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44522e5f-4f0f-440e-bc6a-494e411b6fbe","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T14:29:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44522e5f-4f0f-440e-bc6a-494e411b6fbe","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T14:29:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"727754b2-1327-4ba4-8d9d-bbdb037398e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:39362","PortSpecifier":{"PortValue":39362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"727754b2-1327-4ba4-8d9d-bbdb037398e1","method":"POST","path":"/ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07/v1/completions","host":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T14:29:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"727754b2-1327-4ba4-8d9d-bbdb037398e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:39362","PortSpecifier":{"PortValue":39362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784644156,"nanos":366882103},"http":{"id":"727754b2-1327-4ba4-8d9d-bbdb037398e1","method":"POST","headers":{":authority":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:29:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"727754b2-1327-4ba4-8d9d-bbdb037398e1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ECPzLD5THELX5Rgb_kXWnwdvuKh2jJEyJRbAGV8JYBjjlPMDakGbp6JlErE2"} {"level":"debug","ts":"2026-07-21T14:29:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"727754b2-1327-4ba4-8d9d-bbdb037398e1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ECPzLD5THELX5Rgb_kXWnwdvuKh2jJEyJRbAGV8JYBjjlPMDakGbp6JlErE2\"}"} {"level":"debug","ts":"2026-07-21T14:29:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"727754b2-1327-4ba4-8d9d-bbdb037398e1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1e440ad6-d0a1-4768-876a-ac06899bbbfd","keyName":"e2e-rate-a-a673b3","subscription":"e2e-rate-iso-a-a673b3","tenant":"e2e-shared-a-67be07","userId":"1e440ad6-d0a1-4768-876a-ac06899bbbfd","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T14:29:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"727754b2-1327-4ba4-8d9d-bbdb037398e1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07\",\"requestedSubscription\":\"e2e-rate-iso-a-a673b3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T14:29:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"727754b2-1327-4ba4-8d9d-bbdb037398e1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-67be07","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a673b3","namespace":"ai-tenant-e2e-shared-a-67be07","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07"}} {"level":"debug","ts":"2026-07-21T14:29:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"727754b2-1327-4ba4-8d9d-bbdb037398e1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:29:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"727754b2-1327-4ba4-8d9d-bbdb037398e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"727754b2-1327-4ba4-8d9d-bbdb037398e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"727754b2-1327-4ba4-8d9d-bbdb037398e1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"727754b2-1327-4ba4-8d9d-bbdb037398e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-67be07/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"727754b2-1327-4ba4-8d9d-bbdb037398e1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T14:29:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"727754b2-1327-4ba4-8d9d-bbdb037398e1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a673b3"} {"level":"debug","ts":"2026-07-21T14:29:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"727754b2-1327-4ba4-8d9d-bbdb037398e1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T14:29:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"727754b2-1327-4ba4-8d9d-bbdb037398e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1e440ad6-d0a1-4768-876a-ac06899bbbfd","keyName":"e2e-rate-a-a673b3","selected_subscription":"e2e-rate-iso-a-a673b3","selected_subscription_key":"ai-tenant-e2e-shared-a-67be07/e2e-rate-iso-a-a673b3@ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-67be07","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a673b3","namespace":"ai-tenant-e2e-shared-a-67be07","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T14:29:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"727754b2-1327-4ba4-8d9d-bbdb037398e1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T14:29:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"727754b2-1327-4ba4-8d9d-bbdb037398e1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T14:29:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"056e575a-854f-482b-a3c1-8c3e020603f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:48600","PortSpecifier":{"PortValue":48600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"056e575a-854f-482b-a3c1-8c3e020603f1","method":"POST","path":"/ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07/v1/completions","host":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T14:29:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"056e575a-854f-482b-a3c1-8c3e020603f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:48600","PortSpecifier":{"PortValue":48600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784644157,"nanos":407198477},"http":{"id":"056e575a-854f-482b-a3c1-8c3e020603f1","method":"POST","headers":{":authority":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:29:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"056e575a-854f-482b-a3c1-8c3e020603f1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ECPzLD5THELX5Rgb_kXWnwdvuKh2jJEyJRbAGV8JYBjjlPMDakGbp6JlErE2"} {"level":"debug","ts":"2026-07-21T14:29:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"056e575a-854f-482b-a3c1-8c3e020603f1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ECPzLD5THELX5Rgb_kXWnwdvuKh2jJEyJRbAGV8JYBjjlPMDakGbp6JlErE2\"}"} {"level":"debug","ts":"2026-07-21T14:29:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"056e575a-854f-482b-a3c1-8c3e020603f1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1e440ad6-d0a1-4768-876a-ac06899bbbfd","keyName":"e2e-rate-a-a673b3","subscription":"e2e-rate-iso-a-a673b3","tenant":"e2e-shared-a-67be07","userId":"1e440ad6-d0a1-4768-876a-ac06899bbbfd","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T14:29:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"056e575a-854f-482b-a3c1-8c3e020603f1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07\",\"requestedSubscription\":\"e2e-rate-iso-a-a673b3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T14:29:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"056e575a-854f-482b-a3c1-8c3e020603f1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-67be07","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a673b3","namespace":"ai-tenant-e2e-shared-a-67be07","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07"}} {"level":"debug","ts":"2026-07-21T14:29:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"056e575a-854f-482b-a3c1-8c3e020603f1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:29:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"056e575a-854f-482b-a3c1-8c3e020603f1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"056e575a-854f-482b-a3c1-8c3e020603f1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"056e575a-854f-482b-a3c1-8c3e020603f1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"056e575a-854f-482b-a3c1-8c3e020603f1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-67be07/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"056e575a-854f-482b-a3c1-8c3e020603f1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T14:29:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"056e575a-854f-482b-a3c1-8c3e020603f1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T14:29:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"056e575a-854f-482b-a3c1-8c3e020603f1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a673b3"} {"level":"debug","ts":"2026-07-21T14:29:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"056e575a-854f-482b-a3c1-8c3e020603f1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1e440ad6-d0a1-4768-876a-ac06899bbbfd","keyName":"e2e-rate-a-a673b3","selected_subscription":"e2e-rate-iso-a-a673b3","selected_subscription_key":"ai-tenant-e2e-shared-a-67be07/e2e-rate-iso-a-a673b3@ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-67be07","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a673b3","namespace":"ai-tenant-e2e-shared-a-67be07","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T14:29:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"056e575a-854f-482b-a3c1-8c3e020603f1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T14:29:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"056e575a-854f-482b-a3c1-8c3e020603f1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T14:29:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cec85bbd-8402-457a-8a1d-87baebaf9cff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:51370","PortSpecifier":{"PortValue":51370}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cec85bbd-8402-457a-8a1d-87baebaf9cff","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T14:29:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cec85bbd-8402-457a-8a1d-87baebaf9cff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:51370","PortSpecifier":{"PortValue":51370}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784644168,"nanos":161570218},"http":{"id":"cec85bbd-8402-457a-8a1d-87baebaf9cff","method":"POST","headers":{":authority":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:29:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cec85bbd-8402-457a-8a1d-87baebaf9cff","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T14:29:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cec85bbd-8402-457a-8a1d-87baebaf9cff","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c9d8e713-ec08-4892-a56e-7b129733ef25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=69bd14ba-7c3b-4214-abdc-648afc7bb592"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f501dc36bfbb"]}} {"level":"debug","ts":"2026-07-21T14:29:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cec85bbd-8402-457a-8a1d-87baebaf9cff","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f501dc36bfbb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=69bd14ba-7c3b-4214-abdc-648afc7bb592"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c9d8e713-ec08-4892-a56e-7b129733ef25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e8d0686a50e7d1402fdd8dd17bc7b97614fd40cbff4191fa210bb147ad2f45a6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:29:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cec85bbd-8402-457a-8a1d-87baebaf9cff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cec85bbd-8402-457a-8a1d-87baebaf9cff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cec85bbd-8402-457a-8a1d-87baebaf9cff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-67be07/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cec85bbd-8402-457a-8a1d-87baebaf9cff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T14:29:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cec85bbd-8402-457a-8a1d-87baebaf9cff","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T14:29:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cec85bbd-8402-457a-8a1d-87baebaf9cff","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T14:29:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cec85bbd-8402-457a-8a1d-87baebaf9cff","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T14:29:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cec85bbd-8402-457a-8a1d-87baebaf9cff","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T14:29:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"259ef99e-4335-49f3-b913-32fde46a3673","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:46960","PortSpecifier":{"PortValue":46960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"259ef99e-4335-49f3-b913-32fde46a3673","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-52967c.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T14:29:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"259ef99e-4335-49f3-b913-32fde46a3673","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:46960","PortSpecifier":{"PortValue":46960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784644168,"nanos":203762319},"http":{"id":"259ef99e-4335-49f3-b913-32fde46a3673","method":"POST","headers":{":authority":"e2e-shared-b-52967c.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:29:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"259ef99e-4335-49f3-b913-32fde46a3673","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T14:29:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"259ef99e-4335-49f3-b913-32fde46a3673","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c9d8e713-ec08-4892-a56e-7b129733ef25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=69bd14ba-7c3b-4214-abdc-648afc7bb592"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f501dc36bfbb"]}} {"level":"debug","ts":"2026-07-21T14:29:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"259ef99e-4335-49f3-b913-32fde46a3673","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f501dc36bfbb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=69bd14ba-7c3b-4214-abdc-648afc7bb592"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c9d8e713-ec08-4892-a56e-7b129733ef25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-52967c.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:29:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"259ef99e-4335-49f3-b913-32fde46a3673","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"259ef99e-4335-49f3-b913-32fde46a3673","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"259ef99e-4335-49f3-b913-32fde46a3673","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-52967c/rate-test-model-52967c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-52967c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"259ef99e-4335-49f3-b913-32fde46a3673","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T14:29:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"259ef99e-4335-49f3-b913-32fde46a3673","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T14:29:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"259ef99e-4335-49f3-b913-32fde46a3673","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T14:29:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"259ef99e-4335-49f3-b913-32fde46a3673","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T14:29:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"259ef99e-4335-49f3-b913-32fde46a3673","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T14:29:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"817d6719-1de0-49b7-addd-621b51f47dd8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:51382","PortSpecifier":{"PortValue":51382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"817d6719-1de0-49b7-addd-621b51f47dd8","method":"POST","path":"/ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07/v1/completions","host":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T14:29:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"817d6719-1de0-49b7-addd-621b51f47dd8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:51382","PortSpecifier":{"PortValue":51382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784644168,"nanos":246157849},"http":{"id":"817d6719-1de0-49b7-addd-621b51f47dd8","method":"POST","headers":{":authority":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:29:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"817d6719-1de0-49b7-addd-621b51f47dd8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Y1UCS9QPQWW644Oy_y1HGSlP6wRhNHrWBtLTYWA0b7Ek0MIrz4dfMrDwvxti"} {"level":"debug","ts":"2026-07-21T14:29:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"817d6719-1de0-49b7-addd-621b51f47dd8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Y1UCS9QPQWW644Oy_y1HGSlP6wRhNHrWBtLTYWA0b7Ek0MIrz4dfMrDwvxti\"}"} {"level":"debug","ts":"2026-07-21T14:29:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"817d6719-1de0-49b7-addd-621b51f47dd8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"162f4bbb-8dd5-4045-80c8-03685e23cff5","keyName":"e2e-rate-a-32cc70","subscription":"e2e-rate-iso-a-32cc70","tenant":"e2e-shared-a-67be07","userId":"162f4bbb-8dd5-4045-80c8-03685e23cff5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T14:29:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"817d6719-1de0-49b7-addd-621b51f47dd8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07\",\"requestedSubscription\":\"e2e-rate-iso-a-32cc70\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T14:29:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"817d6719-1de0-49b7-addd-621b51f47dd8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-67be07","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-32cc70","namespace":"ai-tenant-e2e-shared-a-67be07","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07"}} {"level":"debug","ts":"2026-07-21T14:29:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"817d6719-1de0-49b7-addd-621b51f47dd8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:29:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"817d6719-1de0-49b7-addd-621b51f47dd8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"817d6719-1de0-49b7-addd-621b51f47dd8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"817d6719-1de0-49b7-addd-621b51f47dd8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-67be07/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"817d6719-1de0-49b7-addd-621b51f47dd8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"817d6719-1de0-49b7-addd-621b51f47dd8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T14:29:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"817d6719-1de0-49b7-addd-621b51f47dd8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-32cc70"} {"level":"debug","ts":"2026-07-21T14:29:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"817d6719-1de0-49b7-addd-621b51f47dd8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T14:29:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"817d6719-1de0-49b7-addd-621b51f47dd8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"162f4bbb-8dd5-4045-80c8-03685e23cff5","keyName":"e2e-rate-a-32cc70","selected_subscription":"e2e-rate-iso-a-32cc70","selected_subscription_key":"ai-tenant-e2e-shared-a-67be07/e2e-rate-iso-a-32cc70@ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-67be07","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-32cc70","namespace":"ai-tenant-e2e-shared-a-67be07","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T14:29:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"817d6719-1de0-49b7-addd-621b51f47dd8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T14:29:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"817d6719-1de0-49b7-addd-621b51f47dd8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T14:29:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ffeb7d19-c95e-427f-8c23-855fcc6f1080","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:51390","PortSpecifier":{"PortValue":51390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ffeb7d19-c95e-427f-8c23-855fcc6f1080","method":"POST","path":"/ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07/v1/completions","host":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T14:29:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ffeb7d19-c95e-427f-8c23-855fcc6f1080","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:51390","PortSpecifier":{"PortValue":51390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784644169,"nanos":287644450},"http":{"id":"ffeb7d19-c95e-427f-8c23-855fcc6f1080","method":"POST","headers":{":authority":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:29:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ffeb7d19-c95e-427f-8c23-855fcc6f1080","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Y1UCS9QPQWW644Oy_y1HGSlP6wRhNHrWBtLTYWA0b7Ek0MIrz4dfMrDwvxti"} {"level":"debug","ts":"2026-07-21T14:29:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ffeb7d19-c95e-427f-8c23-855fcc6f1080","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Y1UCS9QPQWW644Oy_y1HGSlP6wRhNHrWBtLTYWA0b7Ek0MIrz4dfMrDwvxti\"}"} {"level":"debug","ts":"2026-07-21T14:29:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ffeb7d19-c95e-427f-8c23-855fcc6f1080","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"162f4bbb-8dd5-4045-80c8-03685e23cff5","keyName":"e2e-rate-a-32cc70","subscription":"e2e-rate-iso-a-32cc70","tenant":"e2e-shared-a-67be07","userId":"162f4bbb-8dd5-4045-80c8-03685e23cff5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T14:29:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ffeb7d19-c95e-427f-8c23-855fcc6f1080","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07\",\"requestedSubscription\":\"e2e-rate-iso-a-32cc70\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T14:29:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ffeb7d19-c95e-427f-8c23-855fcc6f1080","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-67be07","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-32cc70","namespace":"ai-tenant-e2e-shared-a-67be07","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07"}} {"level":"debug","ts":"2026-07-21T14:29:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ffeb7d19-c95e-427f-8c23-855fcc6f1080","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:29:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ffeb7d19-c95e-427f-8c23-855fcc6f1080","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ffeb7d19-c95e-427f-8c23-855fcc6f1080","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ffeb7d19-c95e-427f-8c23-855fcc6f1080","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ffeb7d19-c95e-427f-8c23-855fcc6f1080","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-67be07/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ffeb7d19-c95e-427f-8c23-855fcc6f1080","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T14:29:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ffeb7d19-c95e-427f-8c23-855fcc6f1080","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-32cc70"} {"level":"debug","ts":"2026-07-21T14:29:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ffeb7d19-c95e-427f-8c23-855fcc6f1080","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T14:29:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ffeb7d19-c95e-427f-8c23-855fcc6f1080","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"162f4bbb-8dd5-4045-80c8-03685e23cff5","keyName":"e2e-rate-a-32cc70","selected_subscription":"e2e-rate-iso-a-32cc70","selected_subscription_key":"ai-tenant-e2e-shared-a-67be07/e2e-rate-iso-a-32cc70@ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-67be07","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-32cc70","namespace":"ai-tenant-e2e-shared-a-67be07","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T14:29:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ffeb7d19-c95e-427f-8c23-855fcc6f1080","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T14:29:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ffeb7d19-c95e-427f-8c23-855fcc6f1080","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T14:29:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83c1d94d-3ba4-4e94-8656-d6fa09d381fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:51402","PortSpecifier":{"PortValue":51402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"83c1d94d-3ba4-4e94-8656-d6fa09d381fc","method":"POST","path":"/ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07/v1/completions","host":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T14:29:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83c1d94d-3ba4-4e94-8656-d6fa09d381fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:51402","PortSpecifier":{"PortValue":51402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784644170,"nanos":333565731},"http":{"id":"83c1d94d-3ba4-4e94-8656-d6fa09d381fc","method":"POST","headers":{":authority":"e2e-shared-a-67be07.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:29:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"83c1d94d-3ba4-4e94-8656-d6fa09d381fc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Y1UCS9QPQWW644Oy_y1HGSlP6wRhNHrWBtLTYWA0b7Ek0MIrz4dfMrDwvxti"} {"level":"debug","ts":"2026-07-21T14:29:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"83c1d94d-3ba4-4e94-8656-d6fa09d381fc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Y1UCS9QPQWW644Oy_y1HGSlP6wRhNHrWBtLTYWA0b7Ek0MIrz4dfMrDwvxti\"}"} {"level":"debug","ts":"2026-07-21T14:29:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"83c1d94d-3ba4-4e94-8656-d6fa09d381fc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"162f4bbb-8dd5-4045-80c8-03685e23cff5","keyName":"e2e-rate-a-32cc70","subscription":"e2e-rate-iso-a-32cc70","tenant":"e2e-shared-a-67be07","userId":"162f4bbb-8dd5-4045-80c8-03685e23cff5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T14:29:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"83c1d94d-3ba4-4e94-8656-d6fa09d381fc","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07\",\"requestedSubscription\":\"e2e-rate-iso-a-32cc70\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T14:29:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"83c1d94d-3ba4-4e94-8656-d6fa09d381fc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-67be07.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-67be07","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-32cc70","namespace":"ai-tenant-e2e-shared-a-67be07","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07"}} {"level":"debug","ts":"2026-07-21T14:29:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"83c1d94d-3ba4-4e94-8656-d6fa09d381fc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:29:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83c1d94d-3ba4-4e94-8656-d6fa09d381fc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83c1d94d-3ba4-4e94-8656-d6fa09d381fc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83c1d94d-3ba4-4e94-8656-d6fa09d381fc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83c1d94d-3ba4-4e94-8656-d6fa09d381fc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-67be07/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83c1d94d-3ba4-4e94-8656-d6fa09d381fc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T14:29:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83c1d94d-3ba4-4e94-8656-d6fa09d381fc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T14:29:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83c1d94d-3ba4-4e94-8656-d6fa09d381fc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-32cc70"} {"level":"debug","ts":"2026-07-21T14:29:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83c1d94d-3ba4-4e94-8656-d6fa09d381fc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"162f4bbb-8dd5-4045-80c8-03685e23cff5","keyName":"e2e-rate-a-32cc70","selected_subscription":"e2e-rate-iso-a-32cc70","selected_subscription_key":"ai-tenant-e2e-shared-a-67be07/e2e-rate-iso-a-32cc70@ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-67be07","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-32cc70","namespace":"ai-tenant-e2e-shared-a-67be07","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-67be07/rate-test-model-67be07"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T14:29:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83c1d94d-3ba4-4e94-8656-d6fa09d381fc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T14:29:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83c1d94d-3ba4-4e94-8656-d6fa09d381fc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T14:29:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"41f53f70-5fa2-4b41-9ed1-17ea9d7bd75f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:46976","PortSpecifier":{"PortValue":46976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"41f53f70-5fa2-4b41-9ed1-17ea9d7bd75f","method":"POST","path":"/ai-tenant-e2e-shared-b-52967c/rate-test-model-52967c/v1/completions","host":"e2e-shared-b-52967c.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T14:29:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"41f53f70-5fa2-4b41-9ed1-17ea9d7bd75f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:46976","PortSpecifier":{"PortValue":46976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784644170,"nanos":372407352},"http":{"id":"41f53f70-5fa2-4b41-9ed1-17ea9d7bd75f","method":"POST","headers":{":authority":"e2e-shared-b-52967c.apps.23a923bc-ec4f-4a81-9def-f501dc36bfbb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-52967c/rate-test-model-52967c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:29:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"41f53f70-5fa2-4b41-9ed1-17ea9d7bd75f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-18k3MCr8miSzfXVTz_sqf803Qk85cAjUHtsCsyAYxdvHYEDRkEo7JlFYcPxZk"} {"level":"debug","ts":"2026-07-21T14:29:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"41f53f70-5fa2-4b41-9ed1-17ea9d7bd75f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-52967c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-18k3MCr8miSzfXVTz_sqf803Qk85cAjUHtsCsyAYxdvHYEDRkEo7JlFYcPxZk\"}"} {"level":"debug","ts":"2026-07-21T14:29:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"41f53f70-5fa2-4b41-9ed1-17ea9d7bd75f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-52967c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"316942fd-3a19-4e46-a3a0-d4f1f82361b9","keyName":"e2e-rate-b-32cc70","subscription":"e2e-rate-iso-b-32cc70","tenant":"e2e-shared-b-52967c","userId":"316942fd-3a19-4e46-a3a0-d4f1f82361b9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T14:29:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"41f53f70-5fa2-4b41-9ed1-17ea9d7bd75f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-52967c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-52967c/rate-test-model-52967c\",\"requestedSubscription\":\"e2e-rate-iso-b-32cc70\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T14:29:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"41f53f70-5fa2-4b41-9ed1-17ea9d7bd75f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-52967c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-52967c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-32cc70","namespace":"ai-tenant-e2e-shared-b-52967c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-52967c/rate-test-model-52967c"}} {"level":"debug","ts":"2026-07-21T14:29:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"41f53f70-5fa2-4b41-9ed1-17ea9d7bd75f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T14:29:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41f53f70-5fa2-4b41-9ed1-17ea9d7bd75f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41f53f70-5fa2-4b41-9ed1-17ea9d7bd75f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41f53f70-5fa2-4b41-9ed1-17ea9d7bd75f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41f53f70-5fa2-4b41-9ed1-17ea9d7bd75f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-52967c/rate-test-model-52967c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-52967c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T14:29:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41f53f70-5fa2-4b41-9ed1-17ea9d7bd75f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T14:29:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41f53f70-5fa2-4b41-9ed1-17ea9d7bd75f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T14:29:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41f53f70-5fa2-4b41-9ed1-17ea9d7bd75f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-32cc70"} {"level":"debug","ts":"2026-07-21T14:29:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41f53f70-5fa2-4b41-9ed1-17ea9d7bd75f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"316942fd-3a19-4e46-a3a0-d4f1f82361b9","keyName":"e2e-rate-b-32cc70","selected_subscription":"e2e-rate-iso-b-32cc70","selected_subscription_key":"ai-tenant-e2e-shared-b-52967c/e2e-rate-iso-b-32cc70@ai-tenant-e2e-shared-b-52967c/rate-test-model-52967c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-52967c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-32cc70","namespace":"ai-tenant-e2e-shared-b-52967c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-52967c/rate-test-model-52967c"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T14:29:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"41f53f70-5fa2-4b41-9ed1-17ea9d7bd75f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T14:29:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"41f53f70-5fa2-4b41-9ed1-17ea9d7bd75f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T14:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e232fde2d13b893bf10d644a6fd69f8319382ae68be0af767a3604b8b71da415"} {"level":"info","ts":"2026-07-21T14:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c881ca15369514375279ee06e499bfe0c6290dfb50526e1a1e8a48defcf0de6"} {"level":"info","ts":"2026-07-21T14:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5cfda08bbe096b2ff41428e32a1e3b1f2572442ef7df7b247613e75876a7d9d3"} {"level":"info","ts":"2026-07-21T14:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a7289f7eaf1a78f746650bb59360fe0b4da3cdace03bc38a7a2a275d0dab2a2c"} {"level":"info","ts":"2026-07-21T14:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a49d36af439da6929b789ff09c9b99ccd85d01ff7fd730be5e93c61ffbc2f3c4"} {"level":"info","ts":"2026-07-21T14:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c954eb52d50bc15d271918140fcc8e30aa07800f6f191be3aa94b08859f61b3f"} {"level":"info","ts":"2026-07-21T14:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ea60c2365c53b809aaabeb24bac92d3f0696673969add8795cbbed1d59d2627"} {"level":"info","ts":"2026-07-21T14:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2175f018302ca078fd26849ee7dcfa524696bc507e3a27249fd57a372e578a2c"} {"level":"info","ts":"2026-07-21T14:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db5262dfb4dd4dae2df816f397482a4f55e5788e2464f410fb424f9cc4a591d2"} {"level":"info","ts":"2026-07-21T14:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a16bdf9a5573842c4b26e893de628066bf65d290c7c5f32064cce8ac4d4e37b9"} {"level":"info","ts":"2026-07-21T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/501d25ebfe6cc9235804b6371b2b3359283b884a286beeb081da0a6a7e16b65d"} {"level":"info","ts":"2026-07-21T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/541fb392bb97327dc263a5e6f9814010ef3b99857e0f3cd6055caae7cbf223d4"} {"level":"info","ts":"2026-07-21T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dde0d21848e50fe49a251ed778927e0e39cce96721fbbc03729cc6d388cbbc9d"} {"level":"info","ts":"2026-07-21T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1eddda6d459b295395471a559ae4bf6f13707d14e3c2bea18048c4e37642e5cd"} {"level":"info","ts":"2026-07-21T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/51721dec77defe6d73bf0e1f3edf097bd684adbc2aa98ffc87577162ab532e39"} {"level":"info","ts":"2026-07-21T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38d9bae64fe54c9ea675707bc5b247dfa2817eb3f6d64c6ecca777a451e94a56"} {"level":"info","ts":"2026-07-21T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/262624894acafba69c251a1ae347d25872fabe56bd174adb71221c931cab5e4b"} {"level":"info","ts":"2026-07-21T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/164c3ecf3bbacb2a27f839a6f7579a2c5aac80524019cfbb682f112b4e5611a0"} {"level":"info","ts":"2026-07-21T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc2875fa11953cb56ffe9a8b1e9ae2eac0844823c15060e33c2f164e7af1a264"} {"level":"info","ts":"2026-07-21T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/87c09ed44f57f9292c13af66cf36b9fe199c4cd44eb312ec7e4ffa929f9d4e2b"} {"level":"info","ts":"2026-07-21T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8d0686a50e7d1402fdd8dd17bc7b97614fd40cbff4191fa210bb147ad2f45a6"} {"level":"info","ts":"2026-07-21T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ac703be776d66a6f7773c15c3d671626bb1f094034d8914101858d24ca6d890"} {"level":"info","ts":"2026-07-21T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8da8c8de34fa3c3e489360173a12a080974dfbde2e0b1bbe10d6ec276dff2f43"} {"level":"info","ts":"2026-07-21T14:29:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1a2fca23058889693cce44674641402a52c20cbbf42198760f2fc4ef0dd0516"}