--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-13T17:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e490965c9bdea592a4d1312bb6ab56a9df62655f55add97f7a49c6248ce45b2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2f3f0d8a8989279021ad278a2049195edb7b959d7c605729e35ebcd5e2ccf99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e490965c9bdea592a4d1312bb6ab56a9df62655f55add97f7a49c6248ce45b2a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e490965c9bdea592a4d1312bb6ab56a9df62655f55add97f7a49c6248ce45b2a"} {"level":"debug","ts":"2026-07-13T17:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e490965c9bdea592a4d1312bb6ab56a9df62655f55add97f7a49c6248ce45b2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:44:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:44:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e490965c9bdea592a4d1312bb6ab56a9df62655f55add97f7a49c6248ce45b2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e490965c9bdea592a4d1312bb6ab56a9df62655f55add97f7a49c6248ce45b2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e490965c9bdea592a4d1312bb6ab56a9df62655f55add97f7a49c6248ce45b2a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aff724853a5d9ccf13dbd6f8decc882b17c90ea509fb7adc7097a0ecc4af0ae"} {"level":"info","ts":"2026-07-13T17:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2f3f0d8a8989279021ad278a2049195edb7b959d7c605729e35ebcd5e2ccf99"} {"level":"info","ts":"2026-07-13T17:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e490965c9bdea592a4d1312bb6ab56a9df62655f55add97f7a49c6248ce45b2a"} {"level":"info","ts":"2026-07-13T17:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31b7936ae9bae17c928736074c61fab4c761bb3b5bdfaa5e181da51027123504"} {"level":"info","ts":"2026-07-13T17:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4512b87a9a008c9993ffa45f453fec55645a6c9838c9590104d014f7a46987d"} {"level":"info","ts":"2026-07-13T17:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f27c691bf12a955c31d7469a9d8b5d997f4606a4c4d819a34b51bd92609cbc72"} {"level":"info","ts":"2026-07-13T17:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28b1eea3ca461c7b4de54c8d29c40daee4058bdb8b7b1ed05240fcf4d10f0491"} {"level":"info","ts":"2026-07-13T17:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a2f3f0d8a8989279021ad278a2049195edb7b959d7c605729e35ebcd5e2ccf99"} {"level":"info","ts":"2026-07-13T17:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7aff724853a5d9ccf13dbd6f8decc882b17c90ea509fb7adc7097a0ecc4af0ae"} {"level":"info","ts":"2026-07-13T17:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e490965c9bdea592a4d1312bb6ab56a9df62655f55add97f7a49c6248ce45b2a"} {"level":"info","ts":"2026-07-13T17:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dfc9a0b7ec0b20c33550503855f40271a0bf733c0f2cf81fc6f126b224dd9862"} {"level":"debug","ts":"2026-07-13T17:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52c68a9394127307daa65ab55d2ab6628a6bfe23e006aed6f09ee73d9b201003","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:46:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:46:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52c68a9394127307daa65ab55d2ab6628a6bfe23e006aed6f09ee73d9b201003","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52c68a9394127307daa65ab55d2ab6628a6bfe23e006aed6f09ee73d9b201003","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52c68a9394127307daa65ab55d2ab6628a6bfe23e006aed6f09ee73d9b201003"} {"level":"debug","ts":"2026-07-13T17:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52c68a9394127307daa65ab55d2ab6628a6bfe23e006aed6f09ee73d9b201003","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52c68a9394127307daa65ab55d2ab6628a6bfe23e006aed6f09ee73d9b201003","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52c68a9394127307daa65ab55d2ab6628a6bfe23e006aed6f09ee73d9b201003"} {"level":"debug","ts":"2026-07-13T17:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52c68a9394127307daa65ab55d2ab6628a6bfe23e006aed6f09ee73d9b201003","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:46:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:46:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52c68a9394127307daa65ab55d2ab6628a6bfe23e006aed6f09ee73d9b201003"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52c68a9394127307daa65ab55d2ab6628a6bfe23e006aed6f09ee73d9b201003","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:46:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:46:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52c68a9394127307daa65ab55d2ab6628a6bfe23e006aed6f09ee73d9b201003","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c"} {"level":"debug","ts":"2026-07-13T17:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:46:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:46:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52c68a9394127307daa65ab55d2ab6628a6bfe23e006aed6f09ee73d9b201003"} {"level":"info","ts":"2026-07-13T17:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c"} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a9fbb69ca202059c16b2ee9cc8626210f7da1c95cfb6e9ff6bf9766b4d60cc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a9fbb69ca202059c16b2ee9cc8626210f7da1c95cfb6e9ff6bf9766b4d60cc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a9fbb69ca202059c16b2ee9cc8626210f7da1c95cfb6e9ff6bf9766b4d60cc4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a9fbb69ca202059c16b2ee9cc8626210f7da1c95cfb6e9ff6bf9766b4d60cc4"} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a9fbb69ca202059c16b2ee9cc8626210f7da1c95cfb6e9ff6bf9766b4d60cc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a9fbb69ca202059c16b2ee9cc8626210f7da1c95cfb6e9ff6bf9766b4d60cc4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a9fbb69ca202059c16b2ee9cc8626210f7da1c95cfb6e9ff6bf9766b4d60cc4"} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a9fbb69ca202059c16b2ee9cc8626210f7da1c95cfb6e9ff6bf9766b4d60cc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a9fbb69ca202059c16b2ee9cc8626210f7da1c95cfb6e9ff6bf9766b4d60cc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a9fbb69ca202059c16b2ee9cc8626210f7da1c95cfb6e9ff6bf9766b4d60cc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a9fbb69ca202059c16b2ee9cc8626210f7da1c95cfb6e9ff6bf9766b4d60cc4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a9fbb69ca202059c16b2ee9cc8626210f7da1c95cfb6e9ff6bf9766b4d60cc4"} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acb317fc92759e0736abea33f2c70dec33d260a3a3761c137bd54bbf60d463b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acb317fc92759e0736abea33f2c70dec33d260a3a3761c137bd54bbf60d463b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acb317fc92759e0736abea33f2c70dec33d260a3a3761c137bd54bbf60d463b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acb317fc92759e0736abea33f2c70dec33d260a3a3761c137bd54bbf60d463b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acb317fc92759e0736abea33f2c70dec33d260a3a3761c137bd54bbf60d463b"} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acb317fc92759e0736abea33f2c70dec33d260a3a3761c137bd54bbf60d463b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acb317fc92759e0736abea33f2c70dec33d260a3a3761c137bd54bbf60d463b"} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acb317fc92759e0736abea33f2c70dec33d260a3a3761c137bd54bbf60d463b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2acb317fc92759e0736abea33f2c70dec33d260a3a3761c137bd54bbf60d463b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acb317fc92759e0736abea33f2c70dec33d260a3a3761c137bd54bbf60d463b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acb317fc92759e0736abea33f2c70dec33d260a3a3761c137bd54bbf60d463b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acb317fc92759e0736abea33f2c70dec33d260a3a3761c137bd54bbf60d463b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bbcdddf07ee7cb0c888f7daee2dfa9cdd24948f825a103ffe29b60a0140b94c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acb317fc92759e0736abea33f2c70dec33d260a3a3761c137bd54bbf60d463b"} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bbcdddf07ee7cb0c888f7daee2dfa9cdd24948f825a103ffe29b60a0140b94c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acb317fc92759e0736abea33f2c70dec33d260a3a3761c137bd54bbf60d463b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2acb317fc92759e0736abea33f2c70dec33d260a3a3761c137bd54bbf60d463b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bbcdddf07ee7cb0c888f7daee2dfa9cdd24948f825a103ffe29b60a0140b94c"} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acb317fc92759e0736abea33f2c70dec33d260a3a3761c137bd54bbf60d463b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bbcdddf07ee7cb0c888f7daee2dfa9cdd24948f825a103ffe29b60a0140b94c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bbcdddf07ee7cb0c888f7daee2dfa9cdd24948f825a103ffe29b60a0140b94c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bbcdddf07ee7cb0c888f7daee2dfa9cdd24948f825a103ffe29b60a0140b94c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acb317fc92759e0736abea33f2c70dec33d260a3a3761c137bd54bbf60d463b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acb317fc92759e0736abea33f2c70dec33d260a3a3761c137bd54bbf60d463b"} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acb317fc92759e0736abea33f2c70dec33d260a3a3761c137bd54bbf60d463b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bbcdddf07ee7cb0c888f7daee2dfa9cdd24948f825a103ffe29b60a0140b94c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bbcdddf07ee7cb0c888f7daee2dfa9cdd24948f825a103ffe29b60a0140b94c"} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bbcdddf07ee7cb0c888f7daee2dfa9cdd24948f825a103ffe29b60a0140b94c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acb317fc92759e0736abea33f2c70dec33d260a3a3761c137bd54bbf60d463b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bbcdddf07ee7cb0c888f7daee2dfa9cdd24948f825a103ffe29b60a0140b94c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bbcdddf07ee7cb0c888f7daee2dfa9cdd24948f825a103ffe29b60a0140b94c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acb317fc92759e0736abea33f2c70dec33d260a3a3761c137bd54bbf60d463b"} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bbcdddf07ee7cb0c888f7daee2dfa9cdd24948f825a103ffe29b60a0140b94c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acb317fc92759e0736abea33f2c70dec33d260a3a3761c137bd54bbf60d463b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2acb317fc92759e0736abea33f2c70dec33d260a3a3761c137bd54bbf60d463b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bbcdddf07ee7cb0c888f7daee2dfa9cdd24948f825a103ffe29b60a0140b94c"} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acb317fc92759e0736abea33f2c70dec33d260a3a3761c137bd54bbf60d463b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bbcdddf07ee7cb0c888f7daee2dfa9cdd24948f825a103ffe29b60a0140b94c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bbcdddf07ee7cb0c888f7daee2dfa9cdd24948f825a103ffe29b60a0140b94c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acb317fc92759e0736abea33f2c70dec33d260a3a3761c137bd54bbf60d463b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bbcdddf07ee7cb0c888f7daee2dfa9cdd24948f825a103ffe29b60a0140b94c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bbcdddf07ee7cb0c888f7daee2dfa9cdd24948f825a103ffe29b60a0140b94c"} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bbcdddf07ee7cb0c888f7daee2dfa9cdd24948f825a103ffe29b60a0140b94c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bbcdddf07ee7cb0c888f7daee2dfa9cdd24948f825a103ffe29b60a0140b94c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bbcdddf07ee7cb0c888f7daee2dfa9cdd24948f825a103ffe29b60a0140b94c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bbcdddf07ee7cb0c888f7daee2dfa9cdd24948f825a103ffe29b60a0140b94c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acb317fc92759e0736abea33f2c70dec33d260a3a3761c137bd54bbf60d463b"} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bbcdddf07ee7cb0c888f7daee2dfa9cdd24948f825a103ffe29b60a0140b94c"} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c4ac1c500f3a349abb2ffbb79018abd0cb442306c5463a59ea159a237e4b59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c4ac1c500f3a349abb2ffbb79018abd0cb442306c5463a59ea159a237e4b59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdc47a8ac0980f0b1a2a7089868e9fb50514d44fb340c95dd4cf4643c8cbec96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c4ac1c500f3a349abb2ffbb79018abd0cb442306c5463a59ea159a237e4b59"} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdc47a8ac0980f0b1a2a7089868e9fb50514d44fb340c95dd4cf4643c8cbec96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c4ac1c500f3a349abb2ffbb79018abd0cb442306c5463a59ea159a237e4b59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4c4ac1c500f3a349abb2ffbb79018abd0cb442306c5463a59ea159a237e4b59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdc47a8ac0980f0b1a2a7089868e9fb50514d44fb340c95dd4cf4643c8cbec96"} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c4ac1c500f3a349abb2ffbb79018abd0cb442306c5463a59ea159a237e4b59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58ca2240da2914b5b052039d6ac9676215337b0a1d85cec1662f5ea768a346e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c4ac1c500f3a349abb2ffbb79018abd0cb442306c5463a59ea159a237e4b59"} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58ca2240da2914b5b052039d6ac9676215337b0a1d85cec1662f5ea768a346e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdc47a8ac0980f0b1a2a7089868e9fb50514d44fb340c95dd4cf4643c8cbec96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdc47a8ac0980f0b1a2a7089868e9fb50514d44fb340c95dd4cf4643c8cbec96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdc47a8ac0980f0b1a2a7089868e9fb50514d44fb340c95dd4cf4643c8cbec96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c4ac1c500f3a349abb2ffbb79018abd0cb442306c5463a59ea159a237e4b59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58ca2240da2914b5b052039d6ac9676215337b0a1d85cec1662f5ea768a346e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58ca2240da2914b5b052039d6ac9676215337b0a1d85cec1662f5ea768a346e1"} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58ca2240da2914b5b052039d6ac9676215337b0a1d85cec1662f5ea768a346e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdc47a8ac0980f0b1a2a7089868e9fb50514d44fb340c95dd4cf4643c8cbec96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdc47a8ac0980f0b1a2a7089868e9fb50514d44fb340c95dd4cf4643c8cbec96"} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdc47a8ac0980f0b1a2a7089868e9fb50514d44fb340c95dd4cf4643c8cbec96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68387252547e8002d9659d23534cbbc17164a76f90ab7407b35243cb41202496","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c4ac1c500f3a349abb2ffbb79018abd0cb442306c5463a59ea159a237e4b59"} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68387252547e8002d9659d23534cbbc17164a76f90ab7407b35243cb41202496","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58ca2240da2914b5b052039d6ac9676215337b0a1d85cec1662f5ea768a346e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"735ea9d9da5b600a444ac0473a1a316e010212cfc3582cfcc9d3aba6d24489ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"735ea9d9da5b600a444ac0473a1a316e010212cfc3582cfcc9d3aba6d24489ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdc47a8ac0980f0b1a2a7089868e9fb50514d44fb340c95dd4cf4643c8cbec96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdc47a8ac0980f0b1a2a7089868e9fb50514d44fb340c95dd4cf4643c8cbec96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58ca2240da2914b5b052039d6ac9676215337b0a1d85cec1662f5ea768a346e1"} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdc47a8ac0980f0b1a2a7089868e9fb50514d44fb340c95dd4cf4643c8cbec96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f8616aa1d7fb483d54311d49fb673d1611cf639cf46d5e4b65f27f9414c62fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68387252547e8002d9659d23534cbbc17164a76f90ab7407b35243cb41202496"} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f8616aa1d7fb483d54311d49fb673d1611cf639cf46d5e4b65f27f9414c62fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68387252547e8002d9659d23534cbbc17164a76f90ab7407b35243cb41202496","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68387252547e8002d9659d23534cbbc17164a76f90ab7407b35243cb41202496"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/735ea9d9da5b600a444ac0473a1a316e010212cfc3582cfcc9d3aba6d24489ef"} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68387252547e8002d9659d23534cbbc17164a76f90ab7407b35243cb41202496","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea3796478ce6525037cf89e51e1446d837346a52f5187a3739e2faa28c9c88fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea3796478ce6525037cf89e51e1446d837346a52f5187a3739e2faa28c9c88fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"735ea9d9da5b600a444ac0473a1a316e010212cfc3582cfcc9d3aba6d24489ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["735ea9d9da5b600a444ac0473a1a316e010212cfc3582cfcc9d3aba6d24489ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdc47a8ac0980f0b1a2a7089868e9fb50514d44fb340c95dd4cf4643c8cbec96"} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"735ea9d9da5b600a444ac0473a1a316e010212cfc3582cfcc9d3aba6d24489ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58ca2240da2914b5b052039d6ac9676215337b0a1d85cec1662f5ea768a346e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58ca2240da2914b5b052039d6ac9676215337b0a1d85cec1662f5ea768a346e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f8616aa1d7fb483d54311d49fb673d1611cf639cf46d5e4b65f27f9414c62fb"} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58ca2240da2914b5b052039d6ac9676215337b0a1d85cec1662f5ea768a346e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdc47a8ac0980f0b1a2a7089868e9fb50514d44fb340c95dd4cf4643c8cbec96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f8616aa1d7fb483d54311d49fb673d1611cf639cf46d5e4b65f27f9414c62fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f8616aa1d7fb483d54311d49fb673d1611cf639cf46d5e4b65f27f9414c62fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f8616aa1d7fb483d54311d49fb673d1611cf639cf46d5e4b65f27f9414c62fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68387252547e8002d9659d23534cbbc17164a76f90ab7407b35243cb41202496","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea3796478ce6525037cf89e51e1446d837346a52f5187a3739e2faa28c9c88fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea3796478ce6525037cf89e51e1446d837346a52f5187a3739e2faa28c9c88fd"} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea3796478ce6525037cf89e51e1446d837346a52f5187a3739e2faa28c9c88fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"735ea9d9da5b600a444ac0473a1a316e010212cfc3582cfcc9d3aba6d24489ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58ca2240da2914b5b052039d6ac9676215337b0a1d85cec1662f5ea768a346e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f8616aa1d7fb483d54311d49fb673d1611cf639cf46d5e4b65f27f9414c62fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea3796478ce6525037cf89e51e1446d837346a52f5187a3739e2faa28c9c88fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea3796478ce6525037cf89e51e1446d837346a52f5187a3739e2faa28c9c88fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea3796478ce6525037cf89e51e1446d837346a52f5187a3739e2faa28c9c88fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea3796478ce6525037cf89e51e1446d837346a52f5187a3739e2faa28c9c88fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68387252547e8002d9659d23534cbbc17164a76f90ab7407b35243cb41202496"} {"level":"info","ts":"2026-07-13T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/735ea9d9da5b600a444ac0473a1a316e010212cfc3582cfcc9d3aba6d24489ef"} {"level":"info","ts":"2026-07-13T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58ca2240da2914b5b052039d6ac9676215337b0a1d85cec1662f5ea768a346e1"} {"level":"info","ts":"2026-07-13T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f8616aa1d7fb483d54311d49fb673d1611cf639cf46d5e4b65f27f9414c62fb"} {"level":"info","ts":"2026-07-13T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea3796478ce6525037cf89e51e1446d837346a52f5187a3739e2faa28c9c88fd"} {"level":"debug","ts":"2026-07-13T17:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eff58bf51330ef2b91fe16c899374a1392b7cf4fcc85cfc2e0d462dd765b4c13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:47:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:47:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eff58bf51330ef2b91fe16c899374a1392b7cf4fcc85cfc2e0d462dd765b4c13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eff58bf51330ef2b91fe16c899374a1392b7cf4fcc85cfc2e0d462dd765b4c13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:47:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:47:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eff58bf51330ef2b91fe16c899374a1392b7cf4fcc85cfc2e0d462dd765b4c13"} {"level":"info","ts":"2026-07-13T17:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eff58bf51330ef2b91fe16c899374a1392b7cf4fcc85cfc2e0d462dd765b4c13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eff58bf51330ef2b91fe16c899374a1392b7cf4fcc85cfc2e0d462dd765b4c13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:47:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:47:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eff58bf51330ef2b91fe16c899374a1392b7cf4fcc85cfc2e0d462dd765b4c13"} {"level":"error","ts":"2026-07-13T17:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"eff58bf51330ef2b91fe16c899374a1392b7cf4fcc85cfc2e0d462dd765b4c13","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"eff58bf51330ef2b91fe16c899374a1392b7cf4fcc85cfc2e0d462dd765b4c13\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-13T17:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eff58bf51330ef2b91fe16c899374a1392b7cf4fcc85cfc2e0d462dd765b4c13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eff58bf51330ef2b91fe16c899374a1392b7cf4fcc85cfc2e0d462dd765b4c13","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eff58bf51330ef2b91fe16c899374a1392b7cf4fcc85cfc2e0d462dd765b4c13"} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eff58bf51330ef2b91fe16c899374a1392b7cf4fcc85cfc2e0d462dd765b4c13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eff58bf51330ef2b91fe16c899374a1392b7cf4fcc85cfc2e0d462dd765b4c13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eff58bf51330ef2b91fe16c899374a1392b7cf4fcc85cfc2e0d462dd765b4c13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eff58bf51330ef2b91fe16c899374a1392b7cf4fcc85cfc2e0d462dd765b4c13","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eff58bf51330ef2b91fe16c899374a1392b7cf4fcc85cfc2e0d462dd765b4c13"} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77"} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77"} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77"} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77"} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77"} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77"} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77"} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77"} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77"} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a0956c602d3f4e09c2f3ff0807cd4d73d54d3191490f40493339d378d852efe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77"} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a0956c602d3f4e09c2f3ff0807cd4d73d54d3191490f40493339d378d852efe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a0956c602d3f4e09c2f3ff0807cd4d73d54d3191490f40493339d378d852efe"} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a0956c602d3f4e09c2f3ff0807cd4d73d54d3191490f40493339d378d852efe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a0956c602d3f4e09c2f3ff0807cd4d73d54d3191490f40493339d378d852efe"} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a0956c602d3f4e09c2f3ff0807cd4d73d54d3191490f40493339d378d852efe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a0956c602d3f4e09c2f3ff0807cd4d73d54d3191490f40493339d378d852efe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a0956c602d3f4e09c2f3ff0807cd4d73d54d3191490f40493339d378d852efe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77"} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a0956c602d3f4e09c2f3ff0807cd4d73d54d3191490f40493339d378d852efe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a0956c602d3f4e09c2f3ff0807cd4d73d54d3191490f40493339d378d852efe"} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a0956c602d3f4e09c2f3ff0807cd4d73d54d3191490f40493339d378d852efe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77"} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a0956c602d3f4e09c2f3ff0807cd4d73d54d3191490f40493339d378d852efe"} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77"} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77"} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443"} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443"} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77"} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0db804447ba92f8a3dd60e8c712be77bbe16833281b2cdb3ebdefe76c38d05b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0db804447ba92f8a3dd60e8c712be77bbe16833281b2cdb3ebdefe76c38d05b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0db804447ba92f8a3dd60e8c712be77bbe16833281b2cdb3ebdefe76c38d05b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443"} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0db804447ba92f8a3dd60e8c712be77bbe16833281b2cdb3ebdefe76c38d05b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0db804447ba92f8a3dd60e8c712be77bbe16833281b2cdb3ebdefe76c38d05b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0db804447ba92f8a3dd60e8c712be77bbe16833281b2cdb3ebdefe76c38d05b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0db804447ba92f8a3dd60e8c712be77bbe16833281b2cdb3ebdefe76c38d05b"} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0db804447ba92f8a3dd60e8c712be77bbe16833281b2cdb3ebdefe76c38d05b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0db804447ba92f8a3dd60e8c712be77bbe16833281b2cdb3ebdefe76c38d05b"} {"level":"debug","ts":"2026-07-13T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60613ad3362d891ef174e71b7fe77f160dfffa97f97652b420eaa344cab97613","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60613ad3362d891ef174e71b7fe77f160dfffa97f97652b420eaa344cab97613","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60613ad3362d891ef174e71b7fe77f160dfffa97f97652b420eaa344cab97613","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60613ad3362d891ef174e71b7fe77f160dfffa97f97652b420eaa344cab97613"} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60613ad3362d891ef174e71b7fe77f160dfffa97f97652b420eaa344cab97613","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60613ad3362d891ef174e71b7fe77f160dfffa97f97652b420eaa344cab97613","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:47:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"60613ad3362d891ef174e71b7fe77f160dfffa97f97652b420eaa344cab97613","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"60613ad3362d891ef174e71b7fe77f160dfffa97f97652b420eaa344cab97613\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60613ad3362d891ef174e71b7fe77f160dfffa97f97652b420eaa344cab97613","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60613ad3362d891ef174e71b7fe77f160dfffa97f97652b420eaa344cab97613","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0db804447ba92f8a3dd60e8c712be77bbe16833281b2cdb3ebdefe76c38d05b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0db804447ba92f8a3dd60e8c712be77bbe16833281b2cdb3ebdefe76c38d05b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60613ad3362d891ef174e71b7fe77f160dfffa97f97652b420eaa344cab97613"} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0db804447ba92f8a3dd60e8c712be77bbe16833281b2cdb3ebdefe76c38d05b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0db804447ba92f8a3dd60e8c712be77bbe16833281b2cdb3ebdefe76c38d05b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60613ad3362d891ef174e71b7fe77f160dfffa97f97652b420eaa344cab97613"} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83176e3b22cad72f6d9b91fc89779758a0d6b93e51476b96ae990f5d99404bf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83176e3b22cad72f6d9b91fc89779758a0d6b93e51476b96ae990f5d99404bf7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83176e3b22cad72f6d9b91fc89779758a0d6b93e51476b96ae990f5d99404bf7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83176e3b22cad72f6d9b91fc89779758a0d6b93e51476b96ae990f5d99404bf7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60613ad3362d891ef174e71b7fe77f160dfffa97f97652b420eaa344cab97613","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60613ad3362d891ef174e71b7fe77f160dfffa97f97652b420eaa344cab97613"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0db804447ba92f8a3dd60e8c712be77bbe16833281b2cdb3ebdefe76c38d05b"} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60613ad3362d891ef174e71b7fe77f160dfffa97f97652b420eaa344cab97613","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83176e3b22cad72f6d9b91fc89779758a0d6b93e51476b96ae990f5d99404bf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83176e3b22cad72f6d9b91fc89779758a0d6b93e51476b96ae990f5d99404bf7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60613ad3362d891ef174e71b7fe77f160dfffa97f97652b420eaa344cab97613","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83176e3b22cad72f6d9b91fc89779758a0d6b93e51476b96ae990f5d99404bf7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83176e3b22cad72f6d9b91fc89779758a0d6b93e51476b96ae990f5d99404bf7"} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9944250c0925e42236f3a57b9e4a0989bec3c4304113b5b55709aab0dbc6db7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60613ad3362d891ef174e71b7fe77f160dfffa97f97652b420eaa344cab97613"} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9944250c0925e42236f3a57b9e4a0989bec3c4304113b5b55709aab0dbc6db7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83176e3b22cad72f6d9b91fc89779758a0d6b93e51476b96ae990f5d99404bf7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9944250c0925e42236f3a57b9e4a0989bec3c4304113b5b55709aab0dbc6db7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9944250c0925e42236f3a57b9e4a0989bec3c4304113b5b55709aab0dbc6db7e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83176e3b22cad72f6d9b91fc89779758a0d6b93e51476b96ae990f5d99404bf7"} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9944250c0925e42236f3a57b9e4a0989bec3c4304113b5b55709aab0dbc6db7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9944250c0925e42236f3a57b9e4a0989bec3c4304113b5b55709aab0dbc6db7e"} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9944250c0925e42236f3a57b9e4a0989bec3c4304113b5b55709aab0dbc6db7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9944250c0925e42236f3a57b9e4a0989bec3c4304113b5b55709aab0dbc6db7e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9944250c0925e42236f3a57b9e4a0989bec3c4304113b5b55709aab0dbc6db7e"} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9944250c0925e42236f3a57b9e4a0989bec3c4304113b5b55709aab0dbc6db7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9944250c0925e42236f3a57b9e4a0989bec3c4304113b5b55709aab0dbc6db7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9944250c0925e42236f3a57b9e4a0989bec3c4304113b5b55709aab0dbc6db7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff37f9695f9e9aedc658e8b13d31b46d8091f39683070f68ad2b6168c802fc28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff37f9695f9e9aedc658e8b13d31b46d8091f39683070f68ad2b6168c802fc28"} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff37f9695f9e9aedc658e8b13d31b46d8091f39683070f68ad2b6168c802fc28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9944250c0925e42236f3a57b9e4a0989bec3c4304113b5b55709aab0dbc6db7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9944250c0925e42236f3a57b9e4a0989bec3c4304113b5b55709aab0dbc6db7e"} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9944250c0925e42236f3a57b9e4a0989bec3c4304113b5b55709aab0dbc6db7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff37f9695f9e9aedc658e8b13d31b46d8091f39683070f68ad2b6168c802fc28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff37f9695f9e9aedc658e8b13d31b46d8091f39683070f68ad2b6168c802fc28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5"} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff37f9695f9e9aedc658e8b13d31b46d8091f39683070f68ad2b6168c802fc28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9944250c0925e42236f3a57b9e4a0989bec3c4304113b5b55709aab0dbc6db7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9944250c0925e42236f3a57b9e4a0989bec3c4304113b5b55709aab0dbc6db7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff37f9695f9e9aedc658e8b13d31b46d8091f39683070f68ad2b6168c802fc28"} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9944250c0925e42236f3a57b9e4a0989bec3c4304113b5b55709aab0dbc6db7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9944250c0925e42236f3a57b9e4a0989bec3c4304113b5b55709aab0dbc6db7e"} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83176e3b22cad72f6d9b91fc89779758a0d6b93e51476b96ae990f5d99404bf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83176e3b22cad72f6d9b91fc89779758a0d6b93e51476b96ae990f5d99404bf7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5"} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff37f9695f9e9aedc658e8b13d31b46d8091f39683070f68ad2b6168c802fc28"} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83176e3b22cad72f6d9b91fc89779758a0d6b93e51476b96ae990f5d99404bf7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff37f9695f9e9aedc658e8b13d31b46d8091f39683070f68ad2b6168c802fc28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9944250c0925e42236f3a57b9e4a0989bec3c4304113b5b55709aab0dbc6db7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9944250c0925e42236f3a57b9e4a0989bec3c4304113b5b55709aab0dbc6db7e"} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9944250c0925e42236f3a57b9e4a0989bec3c4304113b5b55709aab0dbc6db7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5"} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83176e3b22cad72f6d9b91fc89779758a0d6b93e51476b96ae990f5d99404bf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83176e3b22cad72f6d9b91fc89779758a0d6b93e51476b96ae990f5d99404bf7"} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83176e3b22cad72f6d9b91fc89779758a0d6b93e51476b96ae990f5d99404bf7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9944250c0925e42236f3a57b9e4a0989bec3c4304113b5b55709aab0dbc6db7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b22c95a8b472867609145bd7fea0267114b61f172dfb64102e63d9404203d9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9944250c0925e42236f3a57b9e4a0989bec3c4304113b5b55709aab0dbc6db7e"} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b22c95a8b472867609145bd7fea0267114b61f172dfb64102e63d9404203d9d"} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b22c95a8b472867609145bd7fea0267114b61f172dfb64102e63d9404203d9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83176e3b22cad72f6d9b91fc89779758a0d6b93e51476b96ae990f5d99404bf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83176e3b22cad72f6d9b91fc89779758a0d6b93e51476b96ae990f5d99404bf7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5"} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83176e3b22cad72f6d9b91fc89779758a0d6b93e51476b96ae990f5d99404bf7"} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83176e3b22cad72f6d9b91fc89779758a0d6b93e51476b96ae990f5d99404bf7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9944250c0925e42236f3a57b9e4a0989bec3c4304113b5b55709aab0dbc6db7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9944250c0925e42236f3a57b9e4a0989bec3c4304113b5b55709aab0dbc6db7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b22c95a8b472867609145bd7fea0267114b61f172dfb64102e63d9404203d9d"} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9944250c0925e42236f3a57b9e4a0989bec3c4304113b5b55709aab0dbc6db7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b22c95a8b472867609145bd7fea0267114b61f172dfb64102e63d9404203d9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b22c95a8b472867609145bd7fea0267114b61f172dfb64102e63d9404203d9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3f6c6cb052cbe8e593eec858215b0caad2f9a4db6862ea3f62fbfd86a73c6ba"} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b22c95a8b472867609145bd7fea0267114b61f172dfb64102e63d9404203d9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83176e3b22cad72f6d9b91fc89779758a0d6b93e51476b96ae990f5d99404bf7"} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3f6c6cb052cbe8e593eec858215b0caad2f9a4db6862ea3f62fbfd86a73c6ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3f6c6cb052cbe8e593eec858215b0caad2f9a4db6862ea3f62fbfd86a73c6ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9944250c0925e42236f3a57b9e4a0989bec3c4304113b5b55709aab0dbc6db7e"} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3f6c6cb052cbe8e593eec858215b0caad2f9a4db6862ea3f62fbfd86a73c6ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83176e3b22cad72f6d9b91fc89779758a0d6b93e51476b96ae990f5d99404bf7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9944250c0925e42236f3a57b9e4a0989bec3c4304113b5b55709aab0dbc6db7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b22c95a8b472867609145bd7fea0267114b61f172dfb64102e63d9404203d9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b22c95a8b472867609145bd7fea0267114b61f172dfb64102e63d9404203d9d"} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b22c95a8b472867609145bd7fea0267114b61f172dfb64102e63d9404203d9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3f6c6cb052cbe8e593eec858215b0caad2f9a4db6862ea3f62fbfd86a73c6ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b22c95a8b472867609145bd7fea0267114b61f172dfb64102e63d9404203d9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b22c95a8b472867609145bd7fea0267114b61f172dfb64102e63d9404203d9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5"} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b22c95a8b472867609145bd7fea0267114b61f172dfb64102e63d9404203d9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3f6c6cb052cbe8e593eec858215b0caad2f9a4db6862ea3f62fbfd86a73c6ba"} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b22c95a8b472867609145bd7fea0267114b61f172dfb64102e63d9404203d9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b22c95a8b472867609145bd7fea0267114b61f172dfb64102e63d9404203d9d"} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b22c95a8b472867609145bd7fea0267114b61f172dfb64102e63d9404203d9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5"} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b22c95a8b472867609145bd7fea0267114b61f172dfb64102e63d9404203d9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b22c95a8b472867609145bd7fea0267114b61f172dfb64102e63d9404203d9d"} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b22c95a8b472867609145bd7fea0267114b61f172dfb64102e63d9404203d9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b22c95a8b472867609145bd7fea0267114b61f172dfb64102e63d9404203d9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b22c95a8b472867609145bd7fea0267114b61f172dfb64102e63d9404203d9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5"} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b22c95a8b472867609145bd7fea0267114b61f172dfb64102e63d9404203d9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b22c95a8b472867609145bd7fea0267114b61f172dfb64102e63d9404203d9d"} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b22c95a8b472867609145bd7fea0267114b61f172dfb64102e63d9404203d9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b22c95a8b472867609145bd7fea0267114b61f172dfb64102e63d9404203d9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b22c95a8b472867609145bd7fea0267114b61f172dfb64102e63d9404203d9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b22c95a8b472867609145bd7fea0267114b61f172dfb64102e63d9404203d9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b22c95a8b472867609145bd7fea0267114b61f172dfb64102e63d9404203d9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b22c95a8b472867609145bd7fea0267114b61f172dfb64102e63d9404203d9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5"} {"level":"error","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9b22c95a8b472867609145bd7fea0267114b61f172dfb64102e63d9404203d9d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9b22c95a8b472867609145bd7fea0267114b61f172dfb64102e63d9404203d9d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b22c95a8b472867609145bd7fea0267114b61f172dfb64102e63d9404203d9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b22c95a8b472867609145bd7fea0267114b61f172dfb64102e63d9404203d9d"} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b22c95a8b472867609145bd7fea0267114b61f172dfb64102e63d9404203d9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b22c95a8b472867609145bd7fea0267114b61f172dfb64102e63d9404203d9d"} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b22c95a8b472867609145bd7fea0267114b61f172dfb64102e63d9404203d9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b22c95a8b472867609145bd7fea0267114b61f172dfb64102e63d9404203d9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5"} {"level":"info","ts":"2026-07-13T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b22c95a8b472867609145bd7fea0267114b61f172dfb64102e63d9404203d9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b22c95a8b472867609145bd7fea0267114b61f172dfb64102e63d9404203d9d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b22c95a8b472867609145bd7fea0267114b61f172dfb64102e63d9404203d9d"} {"level":"info","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5648f356-04ee-45be-97a9-680b41049c91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39844","PortSpecifier":{"PortValue":39844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5648f356-04ee-45be-97a9-680b41049c91","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5648f356-04ee-45be-97a9-680b41049c91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39844","PortSpecifier":{"PortValue":39844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783964825,"nanos":36322903},"http":{"id":"5648f356-04ee-45be-97a9-680b41049c91","method":"POST","headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5648f356-04ee-45be-97a9-680b41049c91","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5648f356-04ee-45be-97a9-680b41049c91","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"54029952-54d8-40ca-af4e-07e776923192","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"]}} {"level":"debug","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5648f356-04ee-45be-97a9-680b41049c91","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"54029952-54d8-40ca-af4e-07e776923192","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ea3796478ce6525037cf89e51e1446d837346a52f5187a3739e2faa28c9c88fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5648f356-04ee-45be-97a9-680b41049c91","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5648f356-04ee-45be-97a9-680b41049c91","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5648f356-04ee-45be-97a9-680b41049c91","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-714452/auth-test-model-714452\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5648f356-04ee-45be-97a9-680b41049c91","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5648f356-04ee-45be-97a9-680b41049c91","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5648f356-04ee-45be-97a9-680b41049c91","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5648f356-04ee-45be-97a9-680b41049c91","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5648f356-04ee-45be-97a9-680b41049c91","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ab34973-6e9a-4674-9870-cd7fad222bc2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:48160","PortSpecifier":{"PortValue":48160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4ab34973-6e9a-4674-9870-cd7fad222bc2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ab34973-6e9a-4674-9870-cd7fad222bc2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:48160","PortSpecifier":{"PortValue":48160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783964825,"nanos":96409502},"http":{"id":"4ab34973-6e9a-4674-9870-cd7fad222bc2","method":"POST","headers":{":authority":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4ab34973-6e9a-4674-9870-cd7fad222bc2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4ab34973-6e9a-4674-9870-cd7fad222bc2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"54029952-54d8-40ca-af4e-07e776923192","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"]}} {"level":"debug","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4ab34973-6e9a-4674-9870-cd7fad222bc2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"54029952-54d8-40ca-af4e-07e776923192","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ab34973-6e9a-4674-9870-cd7fad222bc2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ab34973-6e9a-4674-9870-cd7fad222bc2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ab34973-6e9a-4674-9870-cd7fad222bc2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-31a784/auth-test-model-31a784\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4ab34973-6e9a-4674-9870-cd7fad222bc2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ab34973-6e9a-4674-9870-cd7fad222bc2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ab34973-6e9a-4674-9870-cd7fad222bc2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ab34973-6e9a-4674-9870-cd7fad222bc2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ab34973-6e9a-4674-9870-cd7fad222bc2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81f22db9-f593-4e2a-812e-07da343245f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39858","PortSpecifier":{"PortValue":39858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"81f22db9-f593-4e2a-812e-07da343245f6","method":"GET","path":"/maas-api/v1/api-keys/fd58e285-3e30-4b27-a668-971299c442fa","host":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81f22db9-f593-4e2a-812e-07da343245f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39858","PortSpecifier":{"PortValue":39858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783964825,"nanos":157280162},"http":{"id":"81f22db9-f593-4e2a-812e-07da343245f6","method":"GET","headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/fd58e285-3e30-4b27-a668-971299c442fa",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"81f22db9-f593-4e2a-812e-07da343245f6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"81f22db9-f593-4e2a-812e-07da343245f6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"54029952-54d8-40ca-af4e-07e776923192","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"]}} {"level":"debug","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"81f22db9-f593-4e2a-812e-07da343245f6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"54029952-54d8-40ca-af4e-07e776923192","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ea3796478ce6525037cf89e51e1446d837346a52f5187a3739e2faa28c9c88fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/fd58e285-3e30-4b27-a668-971299c442fa",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81f22db9-f593-4e2a-812e-07da343245f6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81f22db9-f593-4e2a-812e-07da343245f6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81f22db9-f593-4e2a-812e-07da343245f6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-714452/auth-test-model-714452\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"81f22db9-f593-4e2a-812e-07da343245f6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81f22db9-f593-4e2a-812e-07da343245f6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81f22db9-f593-4e2a-812e-07da343245f6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81f22db9-f593-4e2a-812e-07da343245f6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81f22db9-f593-4e2a-812e-07da343245f6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4699f2f7-a1a4-48d9-9676-e07a2b78f539","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:48176","PortSpecifier":{"PortValue":48176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4699f2f7-a1a4-48d9-9676-e07a2b78f539","method":"GET","path":"/maas-api/v1/api-keys/6a532b3f-6ab8-4595-ae4a-9de1882ef4eb","host":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4699f2f7-a1a4-48d9-9676-e07a2b78f539","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:48176","PortSpecifier":{"PortValue":48176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783964825,"nanos":193830789},"http":{"id":"4699f2f7-a1a4-48d9-9676-e07a2b78f539","method":"GET","headers":{":authority":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6a532b3f-6ab8-4595-ae4a-9de1882ef4eb",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4699f2f7-a1a4-48d9-9676-e07a2b78f539","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4699f2f7-a1a4-48d9-9676-e07a2b78f539","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"54029952-54d8-40ca-af4e-07e776923192","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"]}} {"level":"debug","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4699f2f7-a1a4-48d9-9676-e07a2b78f539","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"54029952-54d8-40ca-af4e-07e776923192","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6a532b3f-6ab8-4595-ae4a-9de1882ef4eb",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4699f2f7-a1a4-48d9-9676-e07a2b78f539","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4699f2f7-a1a4-48d9-9676-e07a2b78f539","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4699f2f7-a1a4-48d9-9676-e07a2b78f539","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-31a784/auth-test-model-31a784\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4699f2f7-a1a4-48d9-9676-e07a2b78f539","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4699f2f7-a1a4-48d9-9676-e07a2b78f539","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4699f2f7-a1a4-48d9-9676-e07a2b78f539","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4699f2f7-a1a4-48d9-9676-e07a2b78f539","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T17:47:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4699f2f7-a1a4-48d9-9676-e07a2b78f539","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T17:47:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"769787a9-16cf-4f2d-b187-a49c90c54723","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41930","PortSpecifier":{"PortValue":41930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"769787a9-16cf-4f2d-b187-a49c90c54723","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T17:47:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"769787a9-16cf-4f2d-b187-a49c90c54723","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41930","PortSpecifier":{"PortValue":41930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783964844,"nanos":381020954},"http":{"id":"769787a9-16cf-4f2d-b187-a49c90c54723","method":"POST","headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:47:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"769787a9-16cf-4f2d-b187-a49c90c54723","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T17:47:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"769787a9-16cf-4f2d-b187-a49c90c54723","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"54029952-54d8-40ca-af4e-07e776923192","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"]}} {"level":"debug","ts":"2026-07-13T17:47:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"769787a9-16cf-4f2d-b187-a49c90c54723","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"54029952-54d8-40ca-af4e-07e776923192","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ea3796478ce6525037cf89e51e1446d837346a52f5187a3739e2faa28c9c88fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:47:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"769787a9-16cf-4f2d-b187-a49c90c54723","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:47:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"769787a9-16cf-4f2d-b187-a49c90c54723","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:47:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"769787a9-16cf-4f2d-b187-a49c90c54723","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-714452/auth-test-model-714452\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:47:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"769787a9-16cf-4f2d-b187-a49c90c54723","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T17:47:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"769787a9-16cf-4f2d-b187-a49c90c54723","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T17:47:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"769787a9-16cf-4f2d-b187-a49c90c54723","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-13T17:47:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"769787a9-16cf-4f2d-b187-a49c90c54723","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T17:47:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"769787a9-16cf-4f2d-b187-a49c90c54723","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T17:47:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"815dbf2b-fd89-49c3-8d73-9180f150fa09","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39472","PortSpecifier":{"PortValue":39472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"815dbf2b-fd89-49c3-8d73-9180f150fa09","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T17:47:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"815dbf2b-fd89-49c3-8d73-9180f150fa09","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39472","PortSpecifier":{"PortValue":39472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783964844,"nanos":420716238},"http":{"id":"815dbf2b-fd89-49c3-8d73-9180f150fa09","method":"POST","headers":{":authority":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:47:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"815dbf2b-fd89-49c3-8d73-9180f150fa09","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T17:47:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"815dbf2b-fd89-49c3-8d73-9180f150fa09","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"54029952-54d8-40ca-af4e-07e776923192","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"]}} {"level":"debug","ts":"2026-07-13T17:47:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"815dbf2b-fd89-49c3-8d73-9180f150fa09","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"54029952-54d8-40ca-af4e-07e776923192","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:47:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"815dbf2b-fd89-49c3-8d73-9180f150fa09","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:47:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"815dbf2b-fd89-49c3-8d73-9180f150fa09","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:47:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"815dbf2b-fd89-49c3-8d73-9180f150fa09","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-31a784/auth-test-model-31a784\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:47:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"815dbf2b-fd89-49c3-8d73-9180f150fa09","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T17:47:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"815dbf2b-fd89-49c3-8d73-9180f150fa09","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T17:47:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"815dbf2b-fd89-49c3-8d73-9180f150fa09","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T17:47:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"815dbf2b-fd89-49c3-8d73-9180f150fa09","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T17:47:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"815dbf2b-fd89-49c3-8d73-9180f150fa09","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T17:47:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb95c4d9-747c-4923-bd11-76f6fb8fdbad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41940","PortSpecifier":{"PortValue":41940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bb95c4d9-747c-4923-bd11-76f6fb8fdbad","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T17:47:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb95c4d9-747c-4923-bd11-76f6fb8fdbad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41940","PortSpecifier":{"PortValue":41940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783964844,"nanos":459033632},"http":{"id":"bb95c4d9-747c-4923-bd11-76f6fb8fdbad","method":"GET","headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:47:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bb95c4d9-747c-4923-bd11-76f6fb8fdbad","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-GnZ14E7gEupqfObO_vMJicaDdHl27IXMMAb48W39PSqxTyuba8JJipV9hSnW"} {"level":"debug","ts":"2026-07-13T17:47:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bb95c4d9-747c-4923-bd11-76f6fb8fdbad","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-GnZ14E7gEupqfObO_vMJicaDdHl27IXMMAb48W39PSqxTyuba8JJipV9hSnW\"}"} {"level":"debug","ts":"2026-07-13T17:47:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bb95c4d9-747c-4923-bd11-76f6fb8fdbad","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"12190879-362a-4ff4-93e4-f8b5dc2cfa9c","keyName":"e2e-auth-iso-a-19c91f","subscription":"e2e-auth-iso-27adc3","tenant":"e2e-shared-a-714452","userId":"12190879-362a-4ff4-93e4-f8b5dc2cfa9c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-13T17:47:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bb95c4d9-747c-4923-bd11-76f6fb8fdbad","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:47:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb95c4d9-747c-4923-bd11-76f6fb8fdbad","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:47:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb95c4d9-747c-4923-bd11-76f6fb8fdbad","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:47:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb95c4d9-747c-4923-bd11-76f6fb8fdbad","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-714452/auth-test-model-714452\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:47:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb95c4d9-747c-4923-bd11-76f6fb8fdbad","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T17:47:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb95c4d9-747c-4923-bd11-76f6fb8fdbad","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T17:47:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb95c4d9-747c-4923-bd11-76f6fb8fdbad","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-27adc3"} {"level":"debug","ts":"2026-07-13T17:47:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bb95c4d9-747c-4923-bd11-76f6fb8fdbad","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-13T17:47:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb95c4d9-747c-4923-bd11-76f6fb8fdbad","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T17:47:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb95c4d9-747c-4923-bd11-76f6fb8fdbad","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T17:47:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e36fc30d-4ae4-4425-897f-ea4f13aeee93","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58924","PortSpecifier":{"PortValue":58924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e36fc30d-4ae4-4425-897f-ea4f13aeee93","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T17:47:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e36fc30d-4ae4-4425-897f-ea4f13aeee93","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58924","PortSpecifier":{"PortValue":58924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783964861,"nanos":568907149},"http":{"id":"e36fc30d-4ae4-4425-897f-ea4f13aeee93","method":"POST","headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:47:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e36fc30d-4ae4-4425-897f-ea4f13aeee93","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T17:47:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e36fc30d-4ae4-4425-897f-ea4f13aeee93","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"54029952-54d8-40ca-af4e-07e776923192","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"]}} {"level":"debug","ts":"2026-07-13T17:47:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e36fc30d-4ae4-4425-897f-ea4f13aeee93","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"54029952-54d8-40ca-af4e-07e776923192","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ea3796478ce6525037cf89e51e1446d837346a52f5187a3739e2faa28c9c88fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:47:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e36fc30d-4ae4-4425-897f-ea4f13aeee93","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:47:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e36fc30d-4ae4-4425-897f-ea4f13aeee93","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:47:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e36fc30d-4ae4-4425-897f-ea4f13aeee93","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-714452/auth-test-model-714452\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:47:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e36fc30d-4ae4-4425-897f-ea4f13aeee93","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T17:47:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e36fc30d-4ae4-4425-897f-ea4f13aeee93","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T17:47:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e36fc30d-4ae4-4425-897f-ea4f13aeee93","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-13T17:47:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e36fc30d-4ae4-4425-897f-ea4f13aeee93","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T17:47:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e36fc30d-4ae4-4425-897f-ea4f13aeee93","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T17:47:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23c34f1c-2a8d-446f-912f-4a37f94b2657","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36712","PortSpecifier":{"PortValue":36712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"23c34f1c-2a8d-446f-912f-4a37f94b2657","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T17:47:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23c34f1c-2a8d-446f-912f-4a37f94b2657","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36712","PortSpecifier":{"PortValue":36712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783964861,"nanos":605899439},"http":{"id":"23c34f1c-2a8d-446f-912f-4a37f94b2657","method":"POST","headers":{":authority":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:47:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"23c34f1c-2a8d-446f-912f-4a37f94b2657","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T17:47:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"23c34f1c-2a8d-446f-912f-4a37f94b2657","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"54029952-54d8-40ca-af4e-07e776923192","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"]}} {"level":"debug","ts":"2026-07-13T17:47:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"23c34f1c-2a8d-446f-912f-4a37f94b2657","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"54029952-54d8-40ca-af4e-07e776923192","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:47:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23c34f1c-2a8d-446f-912f-4a37f94b2657","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:47:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23c34f1c-2a8d-446f-912f-4a37f94b2657","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:47:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23c34f1c-2a8d-446f-912f-4a37f94b2657","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-31a784/auth-test-model-31a784\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:47:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"23c34f1c-2a8d-446f-912f-4a37f94b2657","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T17:47:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23c34f1c-2a8d-446f-912f-4a37f94b2657","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T17:47:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23c34f1c-2a8d-446f-912f-4a37f94b2657","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T17:47:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23c34f1c-2a8d-446f-912f-4a37f94b2657","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T17:47:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23c34f1c-2a8d-446f-912f-4a37f94b2657","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T17:47:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d18dc3f3-4aea-4d85-92f2-6a4684095cdd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36720","PortSpecifier":{"PortValue":36720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d18dc3f3-4aea-4d85-92f2-6a4684095cdd","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T17:47:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d18dc3f3-4aea-4d85-92f2-6a4684095cdd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36720","PortSpecifier":{"PortValue":36720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783964861,"nanos":641393684},"http":{"id":"d18dc3f3-4aea-4d85-92f2-6a4684095cdd","method":"GET","headers":{":authority":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:47:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d18dc3f3-4aea-4d85-92f2-6a4684095cdd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-7wwbiU8NnvblfLI4_hOfhbAERYfVt0pKtBK0X37WmzVQeclc3sQacDFNHu1m"} {"level":"debug","ts":"2026-07-13T17:47:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d18dc3f3-4aea-4d85-92f2-6a4684095cdd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-31a784.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-7wwbiU8NnvblfLI4_hOfhbAERYfVt0pKtBK0X37WmzVQeclc3sQacDFNHu1m\"}"} {"level":"debug","ts":"2026-07-13T17:47:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d18dc3f3-4aea-4d85-92f2-6a4684095cdd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-31a784.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-13T17:47:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d18dc3f3-4aea-4d85-92f2-6a4684095cdd","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:47:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d18dc3f3-4aea-4d85-92f2-6a4684095cdd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:47:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"d18dc3f3-4aea-4d85-92f2-6a4684095cdd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-13T17:47:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d18dc3f3-4aea-4d85-92f2-6a4684095cdd","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-13T17:47:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d18dc3f3-4aea-4d85-92f2-6a4684095cdd","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}} {"level":"info","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57b5e690-ecf9-4bc5-8389-b31f22083024","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:40828","PortSpecifier":{"PortValue":40828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57b5e690-ecf9-4bc5-8389-b31f22083024","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57b5e690-ecf9-4bc5-8389-b31f22083024","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:40828","PortSpecifier":{"PortValue":40828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783964878,"nanos":787439002},"http":{"id":"57b5e690-ecf9-4bc5-8389-b31f22083024","method":"POST","headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"57b5e690-ecf9-4bc5-8389-b31f22083024","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57b5e690-ecf9-4bc5-8389-b31f22083024","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"54029952-54d8-40ca-af4e-07e776923192","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"]}} {"level":"debug","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57b5e690-ecf9-4bc5-8389-b31f22083024","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"54029952-54d8-40ca-af4e-07e776923192","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ea3796478ce6525037cf89e51e1446d837346a52f5187a3739e2faa28c9c88fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57b5e690-ecf9-4bc5-8389-b31f22083024","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57b5e690-ecf9-4bc5-8389-b31f22083024","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57b5e690-ecf9-4bc5-8389-b31f22083024","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-714452/auth-test-model-714452\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"57b5e690-ecf9-4bc5-8389-b31f22083024","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57b5e690-ecf9-4bc5-8389-b31f22083024","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57b5e690-ecf9-4bc5-8389-b31f22083024","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57b5e690-ecf9-4bc5-8389-b31f22083024","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57b5e690-ecf9-4bc5-8389-b31f22083024","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0b3edfb-b5ed-41d9-b061-a7e1e537adb0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41774","PortSpecifier":{"PortValue":41774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f0b3edfb-b5ed-41d9-b061-a7e1e537adb0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0b3edfb-b5ed-41d9-b061-a7e1e537adb0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41774","PortSpecifier":{"PortValue":41774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783964878,"nanos":828382191},"http":{"id":"f0b3edfb-b5ed-41d9-b061-a7e1e537adb0","method":"POST","headers":{":authority":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f0b3edfb-b5ed-41d9-b061-a7e1e537adb0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f0b3edfb-b5ed-41d9-b061-a7e1e537adb0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"54029952-54d8-40ca-af4e-07e776923192","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"]}} {"level":"debug","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f0b3edfb-b5ed-41d9-b061-a7e1e537adb0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"54029952-54d8-40ca-af4e-07e776923192","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0b3edfb-b5ed-41d9-b061-a7e1e537adb0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0b3edfb-b5ed-41d9-b061-a7e1e537adb0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0b3edfb-b5ed-41d9-b061-a7e1e537adb0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-31a784/auth-test-model-31a784\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f0b3edfb-b5ed-41d9-b061-a7e1e537adb0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0b3edfb-b5ed-41d9-b061-a7e1e537adb0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0b3edfb-b5ed-41d9-b061-a7e1e537adb0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0b3edfb-b5ed-41d9-b061-a7e1e537adb0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0b3edfb-b5ed-41d9-b061-a7e1e537adb0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"906cc265-dedd-4c03-af4e-225806c8a9b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:40838","PortSpecifier":{"PortValue":40838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"906cc265-dedd-4c03-af4e-225806c8a9b7","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"906cc265-dedd-4c03-af4e-225806c8a9b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:40838","PortSpecifier":{"PortValue":40838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783964878,"nanos":865683854},"http":{"id":"906cc265-dedd-4c03-af4e-225806c8a9b7","method":"POST","headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"906cc265-dedd-4c03-af4e-225806c8a9b7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"906cc265-dedd-4c03-af4e-225806c8a9b7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"54029952-54d8-40ca-af4e-07e776923192","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"]}} {"level":"debug","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"906cc265-dedd-4c03-af4e-225806c8a9b7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"54029952-54d8-40ca-af4e-07e776923192","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ea3796478ce6525037cf89e51e1446d837346a52f5187a3739e2faa28c9c88fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"906cc265-dedd-4c03-af4e-225806c8a9b7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"906cc265-dedd-4c03-af4e-225806c8a9b7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"906cc265-dedd-4c03-af4e-225806c8a9b7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-714452/auth-test-model-714452\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"906cc265-dedd-4c03-af4e-225806c8a9b7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"906cc265-dedd-4c03-af4e-225806c8a9b7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"906cc265-dedd-4c03-af4e-225806c8a9b7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"906cc265-dedd-4c03-af4e-225806c8a9b7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"906cc265-dedd-4c03-af4e-225806c8a9b7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6abf113d-586a-4a5b-905e-47df4721efc2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41778","PortSpecifier":{"PortValue":41778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6abf113d-586a-4a5b-905e-47df4721efc2","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6abf113d-586a-4a5b-905e-47df4721efc2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41778","PortSpecifier":{"PortValue":41778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783964878,"nanos":905319088},"http":{"id":"6abf113d-586a-4a5b-905e-47df4721efc2","method":"POST","headers":{":authority":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6abf113d-586a-4a5b-905e-47df4721efc2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6abf113d-586a-4a5b-905e-47df4721efc2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"54029952-54d8-40ca-af4e-07e776923192","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"]}} {"level":"debug","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6abf113d-586a-4a5b-905e-47df4721efc2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"54029952-54d8-40ca-af4e-07e776923192","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6abf113d-586a-4a5b-905e-47df4721efc2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6abf113d-586a-4a5b-905e-47df4721efc2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6abf113d-586a-4a5b-905e-47df4721efc2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-31a784/auth-test-model-31a784\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6abf113d-586a-4a5b-905e-47df4721efc2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6abf113d-586a-4a5b-905e-47df4721efc2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6abf113d-586a-4a5b-905e-47df4721efc2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6abf113d-586a-4a5b-905e-47df4721efc2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T17:47:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6abf113d-586a-4a5b-905e-47df4721efc2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8ab06ec-8abf-4c12-b7d1-1e8fd481351d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53548","PortSpecifier":{"PortValue":53548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c8ab06ec-8abf-4c12-b7d1-1e8fd481351d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8ab06ec-8abf-4c12-b7d1-1e8fd481351d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53548","PortSpecifier":{"PortValue":53548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783964901,"nanos":193266678},"http":{"id":"c8ab06ec-8abf-4c12-b7d1-1e8fd481351d","method":"POST","headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c8ab06ec-8abf-4c12-b7d1-1e8fd481351d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c8ab06ec-8abf-4c12-b7d1-1e8fd481351d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"54029952-54d8-40ca-af4e-07e776923192","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"]}} {"level":"debug","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c8ab06ec-8abf-4c12-b7d1-1e8fd481351d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"54029952-54d8-40ca-af4e-07e776923192","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ea3796478ce6525037cf89e51e1446d837346a52f5187a3739e2faa28c9c88fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8ab06ec-8abf-4c12-b7d1-1e8fd481351d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8ab06ec-8abf-4c12-b7d1-1e8fd481351d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8ab06ec-8abf-4c12-b7d1-1e8fd481351d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-714452/auth-test-model-714452\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c8ab06ec-8abf-4c12-b7d1-1e8fd481351d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8ab06ec-8abf-4c12-b7d1-1e8fd481351d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8ab06ec-8abf-4c12-b7d1-1e8fd481351d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8ab06ec-8abf-4c12-b7d1-1e8fd481351d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8ab06ec-8abf-4c12-b7d1-1e8fd481351d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1ae98e5-73f5-4c64-909b-5757a10237d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60200","PortSpecifier":{"PortValue":60200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b1ae98e5-73f5-4c64-909b-5757a10237d1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1ae98e5-73f5-4c64-909b-5757a10237d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60200","PortSpecifier":{"PortValue":60200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783964901,"nanos":248300050},"http":{"id":"b1ae98e5-73f5-4c64-909b-5757a10237d1","method":"POST","headers":{":authority":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b1ae98e5-73f5-4c64-909b-5757a10237d1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b1ae98e5-73f5-4c64-909b-5757a10237d1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"54029952-54d8-40ca-af4e-07e776923192","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"]}} {"level":"debug","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b1ae98e5-73f5-4c64-909b-5757a10237d1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"54029952-54d8-40ca-af4e-07e776923192","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1ae98e5-73f5-4c64-909b-5757a10237d1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1ae98e5-73f5-4c64-909b-5757a10237d1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1ae98e5-73f5-4c64-909b-5757a10237d1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-31a784/auth-test-model-31a784\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b1ae98e5-73f5-4c64-909b-5757a10237d1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1ae98e5-73f5-4c64-909b-5757a10237d1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1ae98e5-73f5-4c64-909b-5757a10237d1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1ae98e5-73f5-4c64-909b-5757a10237d1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1ae98e5-73f5-4c64-909b-5757a10237d1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5aa8b279-6303-44ca-9349-606dbd5f25ba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60216","PortSpecifier":{"PortValue":60216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5aa8b279-6303-44ca-9349-606dbd5f25ba","method":"GET","path":"/maas-api/v1/api-keys/43671166-b904-4ad7-9aa0-eced799ccb7c","host":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5aa8b279-6303-44ca-9349-606dbd5f25ba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60216","PortSpecifier":{"PortValue":60216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783964901,"nanos":290883208},"http":{"id":"5aa8b279-6303-44ca-9349-606dbd5f25ba","method":"GET","headers":{":authority":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/43671166-b904-4ad7-9aa0-eced799ccb7c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5aa8b279-6303-44ca-9349-606dbd5f25ba","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5aa8b279-6303-44ca-9349-606dbd5f25ba","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"54029952-54d8-40ca-af4e-07e776923192","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"]}} {"level":"debug","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5aa8b279-6303-44ca-9349-606dbd5f25ba","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"54029952-54d8-40ca-af4e-07e776923192","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/43671166-b904-4ad7-9aa0-eced799ccb7c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5aa8b279-6303-44ca-9349-606dbd5f25ba","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5aa8b279-6303-44ca-9349-606dbd5f25ba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5aa8b279-6303-44ca-9349-606dbd5f25ba","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-31a784/auth-test-model-31a784\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5aa8b279-6303-44ca-9349-606dbd5f25ba","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5aa8b279-6303-44ca-9349-606dbd5f25ba","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5aa8b279-6303-44ca-9349-606dbd5f25ba","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5aa8b279-6303-44ca-9349-606dbd5f25ba","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5aa8b279-6303-44ca-9349-606dbd5f25ba","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aee1e9cd-87e8-4976-b9c7-213fbd703ac5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53562","PortSpecifier":{"PortValue":53562}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aee1e9cd-87e8-4976-b9c7-213fbd703ac5","method":"GET","path":"/maas-api/v1/api-keys/43671166-b904-4ad7-9aa0-eced799ccb7c","host":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aee1e9cd-87e8-4976-b9c7-213fbd703ac5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53562","PortSpecifier":{"PortValue":53562}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783964901,"nanos":324990607},"http":{"id":"aee1e9cd-87e8-4976-b9c7-213fbd703ac5","method":"GET","headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/43671166-b904-4ad7-9aa0-eced799ccb7c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"aee1e9cd-87e8-4976-b9c7-213fbd703ac5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aee1e9cd-87e8-4976-b9c7-213fbd703ac5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"54029952-54d8-40ca-af4e-07e776923192","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"]}} {"level":"debug","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aee1e9cd-87e8-4976-b9c7-213fbd703ac5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"54029952-54d8-40ca-af4e-07e776923192","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ea3796478ce6525037cf89e51e1446d837346a52f5187a3739e2faa28c9c88fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/43671166-b904-4ad7-9aa0-eced799ccb7c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aee1e9cd-87e8-4976-b9c7-213fbd703ac5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aee1e9cd-87e8-4976-b9c7-213fbd703ac5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aee1e9cd-87e8-4976-b9c7-213fbd703ac5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-714452/auth-test-model-714452\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"aee1e9cd-87e8-4976-b9c7-213fbd703ac5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aee1e9cd-87e8-4976-b9c7-213fbd703ac5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aee1e9cd-87e8-4976-b9c7-213fbd703ac5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aee1e9cd-87e8-4976-b9c7-213fbd703ac5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T17:48:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aee1e9cd-87e8-4976-b9c7-213fbd703ac5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T17:48:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5aa0a0d9-8b44-434e-9b93-a597bb705a6c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35050","PortSpecifier":{"PortValue":35050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5aa0a0d9-8b44-434e-9b93-a597bb705a6c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T17:48:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5aa0a0d9-8b44-434e-9b93-a597bb705a6c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35050","PortSpecifier":{"PortValue":35050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783964920,"nanos":511005014},"http":{"id":"5aa0a0d9-8b44-434e-9b93-a597bb705a6c","method":"POST","headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:48:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5aa0a0d9-8b44-434e-9b93-a597bb705a6c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T17:48:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5aa0a0d9-8b44-434e-9b93-a597bb705a6c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"54029952-54d8-40ca-af4e-07e776923192","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"]}} {"level":"debug","ts":"2026-07-13T17:48:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5aa0a0d9-8b44-434e-9b93-a597bb705a6c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"54029952-54d8-40ca-af4e-07e776923192","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ea3796478ce6525037cf89e51e1446d837346a52f5187a3739e2faa28c9c88fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:48:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5aa0a0d9-8b44-434e-9b93-a597bb705a6c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:48:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5aa0a0d9-8b44-434e-9b93-a597bb705a6c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:48:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5aa0a0d9-8b44-434e-9b93-a597bb705a6c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-714452/auth-test-model-714452\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:48:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5aa0a0d9-8b44-434e-9b93-a597bb705a6c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T17:48:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5aa0a0d9-8b44-434e-9b93-a597bb705a6c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T17:48:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5aa0a0d9-8b44-434e-9b93-a597bb705a6c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T17:48:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5aa0a0d9-8b44-434e-9b93-a597bb705a6c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T17:48:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5aa0a0d9-8b44-434e-9b93-a597bb705a6c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T17:48:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8139be4-690c-426c-a54d-7362922c0399","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53632","PortSpecifier":{"PortValue":53632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c8139be4-690c-426c-a54d-7362922c0399","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T17:48:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8139be4-690c-426c-a54d-7362922c0399","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53632","PortSpecifier":{"PortValue":53632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783964920,"nanos":551780594},"http":{"id":"c8139be4-690c-426c-a54d-7362922c0399","method":"POST","headers":{":authority":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:48:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c8139be4-690c-426c-a54d-7362922c0399","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T17:48:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c8139be4-690c-426c-a54d-7362922c0399","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"54029952-54d8-40ca-af4e-07e776923192","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"]}} {"level":"debug","ts":"2026-07-13T17:48:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c8139be4-690c-426c-a54d-7362922c0399","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"54029952-54d8-40ca-af4e-07e776923192","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:48:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8139be4-690c-426c-a54d-7362922c0399","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:48:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8139be4-690c-426c-a54d-7362922c0399","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:48:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8139be4-690c-426c-a54d-7362922c0399","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-31a784/auth-test-model-31a784\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:48:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c8139be4-690c-426c-a54d-7362922c0399","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T17:48:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8139be4-690c-426c-a54d-7362922c0399","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T17:48:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8139be4-690c-426c-a54d-7362922c0399","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T17:48:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8139be4-690c-426c-a54d-7362922c0399","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T17:48:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8139be4-690c-426c-a54d-7362922c0399","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T17:48:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d8b0a70-8bcf-4574-849c-43568e943ad3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35060","PortSpecifier":{"PortValue":35060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5d8b0a70-8bcf-4574-849c-43568e943ad3","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T17:48:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d8b0a70-8bcf-4574-849c-43568e943ad3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35060","PortSpecifier":{"PortValue":35060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783964920,"nanos":588588170},"http":{"id":"5d8b0a70-8bcf-4574-849c-43568e943ad3","method":"POST","headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:48:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5d8b0a70-8bcf-4574-849c-43568e943ad3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-BNwE7buzXbX27v96_ioZ4vnndkwxCBSztjPZ3ceoFfRHqqKRARR6qCuvAQtm"} {"level":"debug","ts":"2026-07-13T17:48:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5d8b0a70-8bcf-4574-849c-43568e943ad3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-BNwE7buzXbX27v96_ioZ4vnndkwxCBSztjPZ3ceoFfRHqqKRARR6qCuvAQtm\"}"} {"level":"debug","ts":"2026-07-13T17:48:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5d8b0a70-8bcf-4574-849c-43568e943ad3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"12172c3a-233a-4730-98a8-b4efd5ba97a0","keyName":"e2e-auth-iso-a-988cb9","subscription":"e2e-auth-iso-a9e388","tenant":"e2e-shared-a-714452","userId":"12172c3a-233a-4730-98a8-b4efd5ba97a0","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-13T17:48:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5d8b0a70-8bcf-4574-849c-43568e943ad3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:48:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d8b0a70-8bcf-4574-849c-43568e943ad3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:48:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d8b0a70-8bcf-4574-849c-43568e943ad3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:48:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d8b0a70-8bcf-4574-849c-43568e943ad3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-714452/auth-test-model-714452\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:48:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d8b0a70-8bcf-4574-849c-43568e943ad3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T17:48:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d8b0a70-8bcf-4574-849c-43568e943ad3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T17:48:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d8b0a70-8bcf-4574-849c-43568e943ad3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-a9e388"} {"level":"debug","ts":"2026-07-13T17:48:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5d8b0a70-8bcf-4574-849c-43568e943ad3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-13T17:48:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d8b0a70-8bcf-4574-849c-43568e943ad3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T17:48:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d8b0a70-8bcf-4574-849c-43568e943ad3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T17:48:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a9fbb69ca202059c16b2ee9cc8626210f7da1c95cfb6e9ff6bf9766b4d60cc4"} {"level":"info","ts":"2026-07-13T17:48:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f59805bdfa582b7b0f9278f3d4363b1cf3b0c1644bb74deb6122b7a066ecc77"} {"level":"info","ts":"2026-07-13T17:48:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eff58bf51330ef2b91fe16c899374a1392b7cf4fcc85cfc2e0d462dd765b4c13"} {"level":"info","ts":"2026-07-13T17:48:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b22c95a8b472867609145bd7fea0267114b61f172dfb64102e63d9404203d9d"} {"level":"info","ts":"2026-07-13T17:48:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f8616aa1d7fb483d54311d49fb673d1611cf639cf46d5e4b65f27f9414c62fb"} {"level":"info","ts":"2026-07-13T17:48:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3f6c6cb052cbe8e593eec858215b0caad2f9a4db6862ea3f62fbfd86a73c6ba"} {"level":"info","ts":"2026-07-13T17:48:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2acb317fc92759e0736abea33f2c70dec33d260a3a3761c137bd54bbf60d463b"} {"level":"info","ts":"2026-07-13T17:48:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/68387252547e8002d9659d23534cbbc17164a76f90ab7407b35243cb41202496"} {"level":"info","ts":"2026-07-13T17:48:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52c68a9394127307daa65ab55d2ab6628a6bfe23e006aed6f09ee73d9b201003"} {"level":"info","ts":"2026-07-13T17:48:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0db804447ba92f8a3dd60e8c712be77bbe16833281b2cdb3ebdefe76c38d05b"} {"level":"info","ts":"2026-07-13T17:48:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4c4ac1c500f3a349abb2ffbb79018abd0cb442306c5463a59ea159a237e4b59"} {"level":"info","ts":"2026-07-13T17:48:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cdc47a8ac0980f0b1a2a7089868e9fb50514d44fb340c95dd4cf4643c8cbec96"} {"level":"info","ts":"2026-07-13T17:48:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0bbcdddf07ee7cb0c888f7daee2dfa9cdd24948f825a103ffe29b60a0140b94c"} {"level":"info","ts":"2026-07-13T17:48:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60613ad3362d891ef174e71b7fe77f160dfffa97f97652b420eaa344cab97613"} {"level":"info","ts":"2026-07-13T17:48:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83176e3b22cad72f6d9b91fc89779758a0d6b93e51476b96ae990f5d99404bf7"} {"level":"info","ts":"2026-07-13T17:48:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9944250c0925e42236f3a57b9e4a0989bec3c4304113b5b55709aab0dbc6db7e"} {"level":"debug","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a54dba31896dc80d719bceee5ac2ce599a6c8cbf80204ee3f1215eff3bc6270","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a54dba31896dc80d719bceee5ac2ce599a6c8cbf80204ee3f1215eff3bc6270"} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a54dba31896dc80d719bceee5ac2ce599a6c8cbf80204ee3f1215eff3bc6270","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a54dba31896dc80d719bceee5ac2ce599a6c8cbf80204ee3f1215eff3bc6270","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a54dba31896dc80d719bceee5ac2ce599a6c8cbf80204ee3f1215eff3bc6270","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a54dba31896dc80d719bceee5ac2ce599a6c8cbf80204ee3f1215eff3bc6270","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a54dba31896dc80d719bceee5ac2ce599a6c8cbf80204ee3f1215eff3bc6270"} {"level":"debug","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a54dba31896dc80d719bceee5ac2ce599a6c8cbf80204ee3f1215eff3bc6270","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a54dba31896dc80d719bceee5ac2ce599a6c8cbf80204ee3f1215eff3bc6270"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199"} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a54dba31896dc80d719bceee5ac2ce599a6c8cbf80204ee3f1215eff3bc6270","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a54dba31896dc80d719bceee5ac2ce599a6c8cbf80204ee3f1215eff3bc6270","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199"} {"level":"debug","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a54dba31896dc80d719bceee5ac2ce599a6c8cbf80204ee3f1215eff3bc6270"} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199"} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dbd9c60bbe6d0c5e57c978edf953a6ae932983e20f3214f2e0a18e2efdda6ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dbd9c60bbe6d0c5e57c978edf953a6ae932983e20f3214f2e0a18e2efdda6ad"} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dbd9c60bbe6d0c5e57c978edf953a6ae932983e20f3214f2e0a18e2efdda6ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dbd9c60bbe6d0c5e57c978edf953a6ae932983e20f3214f2e0a18e2efdda6ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5dbd9c60bbe6d0c5e57c978edf953a6ae932983e20f3214f2e0a18e2efdda6ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199"} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dbd9c60bbe6d0c5e57c978edf953a6ae932983e20f3214f2e0a18e2efdda6ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dbd9c60bbe6d0c5e57c978edf953a6ae932983e20f3214f2e0a18e2efdda6ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dbd9c60bbe6d0c5e57c978edf953a6ae932983e20f3214f2e0a18e2efdda6ad"} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dbd9c60bbe6d0c5e57c978edf953a6ae932983e20f3214f2e0a18e2efdda6ad"} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dbd9c60bbe6d0c5e57c978edf953a6ae932983e20f3214f2e0a18e2efdda6ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dbd9c60bbe6d0c5e57c978edf953a6ae932983e20f3214f2e0a18e2efdda6ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5dbd9c60bbe6d0c5e57c978edf953a6ae932983e20f3214f2e0a18e2efdda6ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199"} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dbd9c60bbe6d0c5e57c978edf953a6ae932983e20f3214f2e0a18e2efdda6ad"} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dbd9c60bbe6d0c5e57c978edf953a6ae932983e20f3214f2e0a18e2efdda6ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dbd9c60bbe6d0c5e57c978edf953a6ae932983e20f3214f2e0a18e2efdda6ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199"} {"level":"debug","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dbd9c60bbe6d0c5e57c978edf953a6ae932983e20f3214f2e0a18e2efdda6ad"} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199"} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199"} {"level":"debug","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199"} {"level":"debug","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199"} {"level":"debug","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2c6ef2cc61c5ca6fd80a3cdb4e6675a8016d96f888ad4a51d637e3f7504b680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2c6ef2cc61c5ca6fd80a3cdb4e6675a8016d96f888ad4a51d637e3f7504b680","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2c6ef2cc61c5ca6fd80a3cdb4e6675a8016d96f888ad4a51d637e3f7504b680"} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2c6ef2cc61c5ca6fd80a3cdb4e6675a8016d96f888ad4a51d637e3f7504b680","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2c6ef2cc61c5ca6fd80a3cdb4e6675a8016d96f888ad4a51d637e3f7504b680"} {"level":"debug","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2c6ef2cc61c5ca6fd80a3cdb4e6675a8016d96f888ad4a51d637e3f7504b680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2c6ef2cc61c5ca6fd80a3cdb4e6675a8016d96f888ad4a51d637e3f7504b680"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199"} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2c6ef2cc61c5ca6fd80a3cdb4e6675a8016d96f888ad4a51d637e3f7504b680","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2c6ef2cc61c5ca6fd80a3cdb4e6675a8016d96f888ad4a51d637e3f7504b680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2c6ef2cc61c5ca6fd80a3cdb4e6675a8016d96f888ad4a51d637e3f7504b680"} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2c6ef2cc61c5ca6fd80a3cdb4e6675a8016d96f888ad4a51d637e3f7504b680","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2c6ef2cc61c5ca6fd80a3cdb4e6675a8016d96f888ad4a51d637e3f7504b680","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2c6ef2cc61c5ca6fd80a3cdb4e6675a8016d96f888ad4a51d637e3f7504b680","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2c6ef2cc61c5ca6fd80a3cdb4e6675a8016d96f888ad4a51d637e3f7504b680"} {"level":"debug","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2c6ef2cc61c5ca6fd80a3cdb4e6675a8016d96f888ad4a51d637e3f7504b680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2c6ef2cc61c5ca6fd80a3cdb4e6675a8016d96f888ad4a51d637e3f7504b680"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2c6ef2cc61c5ca6fd80a3cdb4e6675a8016d96f888ad4a51d637e3f7504b680","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2c6ef2cc61c5ca6fd80a3cdb4e6675a8016d96f888ad4a51d637e3f7504b680","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2c6ef2cc61c5ca6fd80a3cdb4e6675a8016d96f888ad4a51d637e3f7504b680"} {"level":"debug","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd"} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd"} {"level":"debug","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd"} {"level":"debug","ts":"2026-07-13T17:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f60e9c7ee1df4fcd3278496b7588b3dbd8a36341dcdd2a97327ecd539f74848","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f60e9c7ee1df4fcd3278496b7588b3dbd8a36341dcdd2a97327ecd539f74848","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f60e9c7ee1df4fcd3278496b7588b3dbd8a36341dcdd2a97327ecd539f74848","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:49:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f60e9c7ee1df4fcd3278496b7588b3dbd8a36341dcdd2a97327ecd539f74848"} {"level":"info","ts":"2026-07-13T17:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f60e9c7ee1df4fcd3278496b7588b3dbd8a36341dcdd2a97327ecd539f74848","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77bb1fb19edbd9d864050abb24f414ec9513ac5f97f0ca22b230e34ec62fee30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:49:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:49:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77bb1fb19edbd9d864050abb24f414ec9513ac5f97f0ca22b230e34ec62fee30"} {"level":"info","ts":"2026-07-13T17:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77bb1fb19edbd9d864050abb24f414ec9513ac5f97f0ca22b230e34ec62fee30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f60e9c7ee1df4fcd3278496b7588b3dbd8a36341dcdd2a97327ecd539f74848","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77bb1fb19edbd9d864050abb24f414ec9513ac5f97f0ca22b230e34ec62fee30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:49:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:49:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77bb1fb19edbd9d864050abb24f414ec9513ac5f97f0ca22b230e34ec62fee30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f60e9c7ee1df4fcd3278496b7588b3dbd8a36341dcdd2a97327ecd539f74848"} {"level":"info","ts":"2026-07-13T17:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77bb1fb19edbd9d864050abb24f414ec9513ac5f97f0ca22b230e34ec62fee30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f60e9c7ee1df4fcd3278496b7588b3dbd8a36341dcdd2a97327ecd539f74848","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:49:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:49:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f60e9c7ee1df4fcd3278496b7588b3dbd8a36341dcdd2a97327ecd539f74848"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77bb1fb19edbd9d864050abb24f414ec9513ac5f97f0ca22b230e34ec62fee30"} {"level":"info","ts":"2026-07-13T17:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f60e9c7ee1df4fcd3278496b7588b3dbd8a36341dcdd2a97327ecd539f74848","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77bb1fb19edbd9d864050abb24f414ec9513ac5f97f0ca22b230e34ec62fee30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:49:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:49:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77bb1fb19edbd9d864050abb24f414ec9513ac5f97f0ca22b230e34ec62fee30"} {"level":"info","ts":"2026-07-13T17:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77bb1fb19edbd9d864050abb24f414ec9513ac5f97f0ca22b230e34ec62fee30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f60e9c7ee1df4fcd3278496b7588b3dbd8a36341dcdd2a97327ecd539f74848"} {"level":"debug","ts":"2026-07-13T17:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f60e9c7ee1df4fcd3278496b7588b3dbd8a36341dcdd2a97327ecd539f74848","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fff1b3714f841be554af6dfdd16eacfb96deb30d2031e529b0f82726b3004321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:49:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:49:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fff1b3714f841be554af6dfdd16eacfb96deb30d2031e529b0f82726b3004321","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77bb1fb19edbd9d864050abb24f414ec9513ac5f97f0ca22b230e34ec62fee30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:49:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:49:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77bb1fb19edbd9d864050abb24f414ec9513ac5f97f0ca22b230e34ec62fee30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fff1b3714f841be554af6dfdd16eacfb96deb30d2031e529b0f82726b3004321"} {"level":"info","ts":"2026-07-13T17:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77bb1fb19edbd9d864050abb24f414ec9513ac5f97f0ca22b230e34ec62fee30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fff1b3714f841be554af6dfdd16eacfb96deb30d2031e529b0f82726b3004321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:49:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:49:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fff1b3714f841be554af6dfdd16eacfb96deb30d2031e529b0f82726b3004321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77bb1fb19edbd9d864050abb24f414ec9513ac5f97f0ca22b230e34ec62fee30"} {"level":"info","ts":"2026-07-13T17:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fff1b3714f841be554af6dfdd16eacfb96deb30d2031e529b0f82726b3004321","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77bb1fb19edbd9d864050abb24f414ec9513ac5f97f0ca22b230e34ec62fee30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fff1b3714f841be554af6dfdd16eacfb96deb30d2031e529b0f82726b3004321"} {"level":"debug","ts":"2026-07-13T17:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fff1b3714f841be554af6dfdd16eacfb96deb30d2031e529b0f82726b3004321","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77bb1fb19edbd9d864050abb24f414ec9513ac5f97f0ca22b230e34ec62fee30"} {"level":"info","ts":"2026-07-13T17:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fff1b3714f841be554af6dfdd16eacfb96deb30d2031e529b0f82726b3004321"} {"level":"debug","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:49:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:49:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c"} {"level":"debug","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c"} {"level":"debug","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:49:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:49:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:49:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:49:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c"} {"level":"info","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c"} {"level":"debug","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:49:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:49:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc5ee5d1f29e671880985f09d2a92174ae7be029576a1602f0113ea652f6cc0f"} {"level":"info","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc5ee5d1f29e671880985f09d2a92174ae7be029576a1602f0113ea652f6cc0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:49:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:49:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc5ee5d1f29e671880985f09d2a92174ae7be029576a1602f0113ea652f6cc0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc5ee5d1f29e671880985f09d2a92174ae7be029576a1602f0113ea652f6cc0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:49:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:49:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c"} {"level":"info","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc5ee5d1f29e671880985f09d2a92174ae7be029576a1602f0113ea652f6cc0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:49:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:49:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc5ee5d1f29e671880985f09d2a92174ae7be029576a1602f0113ea652f6cc0f"} {"level":"info","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc5ee5d1f29e671880985f09d2a92174ae7be029576a1602f0113ea652f6cc0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc5ee5d1f29e671880985f09d2a92174ae7be029576a1602f0113ea652f6cc0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:49:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:49:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc5ee5d1f29e671880985f09d2a92174ae7be029576a1602f0113ea652f6cc0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c"} {"level":"info","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc5ee5d1f29e671880985f09d2a92174ae7be029576a1602f0113ea652f6cc0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8d5f13d3bd8f435760c63320e32f7a88d3e6476e993ea1f5e08dc83ca15eda4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:49:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:49:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc5ee5d1f29e671880985f09d2a92174ae7be029576a1602f0113ea652f6cc0f"} {"level":"info","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8d5f13d3bd8f435760c63320e32f7a88d3e6476e993ea1f5e08dc83ca15eda4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:49:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:49:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc5ee5d1f29e671880985f09d2a92174ae7be029576a1602f0113ea652f6cc0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8d5f13d3bd8f435760c63320e32f7a88d3e6476e993ea1f5e08dc83ca15eda4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:49:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:49:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8d5f13d3bd8f435760c63320e32f7a88d3e6476e993ea1f5e08dc83ca15eda4"} {"level":"info","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8d5f13d3bd8f435760c63320e32f7a88d3e6476e993ea1f5e08dc83ca15eda4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8d5f13d3bd8f435760c63320e32f7a88d3e6476e993ea1f5e08dc83ca15eda4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:49:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:49:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8d5f13d3bd8f435760c63320e32f7a88d3e6476e993ea1f5e08dc83ca15eda4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc5ee5d1f29e671880985f09d2a92174ae7be029576a1602f0113ea652f6cc0f"} {"level":"info","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8d5f13d3bd8f435760c63320e32f7a88d3e6476e993ea1f5e08dc83ca15eda4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8d5f13d3bd8f435760c63320e32f7a88d3e6476e993ea1f5e08dc83ca15eda4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:49:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:49:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8d5f13d3bd8f435760c63320e32f7a88d3e6476e993ea1f5e08dc83ca15eda4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c8d5f13d3bd8f435760c63320e32f7a88d3e6476e993ea1f5e08dc83ca15eda4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c8d5f13d3bd8f435760c63320e32f7a88d3e6476e993ea1f5e08dc83ca15eda4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8d5f13d3bd8f435760c63320e32f7a88d3e6476e993ea1f5e08dc83ca15eda4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c"} {"level":"debug","ts":"2026-07-13T17:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8d5f13d3bd8f435760c63320e32f7a88d3e6476e993ea1f5e08dc83ca15eda4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:49:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:49:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8d5f13d3bd8f435760c63320e32f7a88d3e6476e993ea1f5e08dc83ca15eda4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dc8a6845295a1af504a7d0ce02cf85352e8cea03bc0fb3ff04bdac741448e21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:49:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8d5f13d3bd8f435760c63320e32f7a88d3e6476e993ea1f5e08dc83ca15eda4"} {"level":"info","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dc8a6845295a1af504a7d0ce02cf85352e8cea03bc0fb3ff04bdac741448e21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8d5f13d3bd8f435760c63320e32f7a88d3e6476e993ea1f5e08dc83ca15eda4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:49:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:49:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8d5f13d3bd8f435760c63320e32f7a88d3e6476e993ea1f5e08dc83ca15eda4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dc8a6845295a1af504a7d0ce02cf85352e8cea03bc0fb3ff04bdac741448e21"} {"level":"info","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8d5f13d3bd8f435760c63320e32f7a88d3e6476e993ea1f5e08dc83ca15eda4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dc8a6845295a1af504a7d0ce02cf85352e8cea03bc0fb3ff04bdac741448e21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:49:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:49:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2dc8a6845295a1af504a7d0ce02cf85352e8cea03bc0fb3ff04bdac741448e21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8d5f13d3bd8f435760c63320e32f7a88d3e6476e993ea1f5e08dc83ca15eda4"} {"level":"info","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dc8a6845295a1af504a7d0ce02cf85352e8cea03bc0fb3ff04bdac741448e21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8d5f13d3bd8f435760c63320e32f7a88d3e6476e993ea1f5e08dc83ca15eda4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dc8a6845295a1af504a7d0ce02cf85352e8cea03bc0fb3ff04bdac741448e21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:49:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dc8a6845295a1af504a7d0ce02cf85352e8cea03bc0fb3ff04bdac741448e21"} {"level":"info","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dc8a6845295a1af504a7d0ce02cf85352e8cea03bc0fb3ff04bdac741448e21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dc8a6845295a1af504a7d0ce02cf85352e8cea03bc0fb3ff04bdac741448e21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:49:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:49:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2dc8a6845295a1af504a7d0ce02cf85352e8cea03bc0fb3ff04bdac741448e21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8d5f13d3bd8f435760c63320e32f7a88d3e6476e993ea1f5e08dc83ca15eda4"} {"level":"info","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dc8a6845295a1af504a7d0ce02cf85352e8cea03bc0fb3ff04bdac741448e21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dc8a6845295a1af504a7d0ce02cf85352e8cea03bc0fb3ff04bdac741448e21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dc8a6845295a1af504a7d0ce02cf85352e8cea03bc0fb3ff04bdac741448e21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:49:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dc8a6845295a1af504a7d0ce02cf85352e8cea03bc0fb3ff04bdac741448e21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dc8a6845295a1af504a7d0ce02cf85352e8cea03bc0fb3ff04bdac741448e21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:49:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dc8a6845295a1af504a7d0ce02cf85352e8cea03bc0fb3ff04bdac741448e21"} {"level":"error","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2dc8a6845295a1af504a7d0ce02cf85352e8cea03bc0fb3ff04bdac741448e21","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2dc8a6845295a1af504a7d0ce02cf85352e8cea03bc0fb3ff04bdac741448e21\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dc8a6845295a1af504a7d0ce02cf85352e8cea03bc0fb3ff04bdac741448e21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dc8a6845295a1af504a7d0ce02cf85352e8cea03bc0fb3ff04bdac741448e21","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dc8a6845295a1af504a7d0ce02cf85352e8cea03bc0fb3ff04bdac741448e21"} {"level":"debug","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42cc80f805b9b694f76f8e6ee216fb8b0fa32a5cdb7b437b0314f10b7047d056","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:49:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42cc80f805b9b694f76f8e6ee216fb8b0fa32a5cdb7b437b0314f10b7047d056","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dc8a6845295a1af504a7d0ce02cf85352e8cea03bc0fb3ff04bdac741448e21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:49:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:49:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2dc8a6845295a1af504a7d0ce02cf85352e8cea03bc0fb3ff04bdac741448e21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42cc80f805b9b694f76f8e6ee216fb8b0fa32a5cdb7b437b0314f10b7047d056"} {"level":"info","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dc8a6845295a1af504a7d0ce02cf85352e8cea03bc0fb3ff04bdac741448e21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42cc80f805b9b694f76f8e6ee216fb8b0fa32a5cdb7b437b0314f10b7047d056","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dc8a6845295a1af504a7d0ce02cf85352e8cea03bc0fb3ff04bdac741448e21","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42cc80f805b9b694f76f8e6ee216fb8b0fa32a5cdb7b437b0314f10b7047d056"} {"level":"debug","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42cc80f805b9b694f76f8e6ee216fb8b0fa32a5cdb7b437b0314f10b7047d056","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:49:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:49:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42cc80f805b9b694f76f8e6ee216fb8b0fa32a5cdb7b437b0314f10b7047d056"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42cc80f805b9b694f76f8e6ee216fb8b0fa32a5cdb7b437b0314f10b7047d056","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42cc80f805b9b694f76f8e6ee216fb8b0fa32a5cdb7b437b0314f10b7047d056","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dc8a6845295a1af504a7d0ce02cf85352e8cea03bc0fb3ff04bdac741448e21"} {"level":"info","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42cc80f805b9b694f76f8e6ee216fb8b0fa32a5cdb7b437b0314f10b7047d056"} {"level":"debug","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ff724ff41448f1b65f7cb4df080c84e48805903b2352cefadc9ca30ba49a3e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:49:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ff724ff41448f1b65f7cb4df080c84e48805903b2352cefadc9ca30ba49a3e4"} {"level":"info","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ff724ff41448f1b65f7cb4df080c84e48805903b2352cefadc9ca30ba49a3e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ff724ff41448f1b65f7cb4df080c84e48805903b2352cefadc9ca30ba49a3e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ff724ff41448f1b65f7cb4df080c84e48805903b2352cefadc9ca30ba49a3e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ff724ff41448f1b65f7cb4df080c84e48805903b2352cefadc9ca30ba49a3e4"} {"level":"debug","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ff724ff41448f1b65f7cb4df080c84e48805903b2352cefadc9ca30ba49a3e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:49:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:49:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ff724ff41448f1b65f7cb4df080c84e48805903b2352cefadc9ca30ba49a3e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ff724ff41448f1b65f7cb4df080c84e48805903b2352cefadc9ca30ba49a3e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ff724ff41448f1b65f7cb4df080c84e48805903b2352cefadc9ca30ba49a3e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:49:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ff724ff41448f1b65f7cb4df080c84e48805903b2352cefadc9ca30ba49a3e4"} {"level":"info","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ff724ff41448f1b65f7cb4df080c84e48805903b2352cefadc9ca30ba49a3e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b6fd67fc281de7db9264e7395281441601ccc081b750bae718822f67bc333eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:49:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b6fd67fc281de7db9264e7395281441601ccc081b750bae718822f67bc333eb"} {"level":"info","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ff724ff41448f1b65f7cb4df080c84e48805903b2352cefadc9ca30ba49a3e4"} {"level":"info","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b6fd67fc281de7db9264e7395281441601ccc081b750bae718822f67bc333eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ff724ff41448f1b65f7cb4df080c84e48805903b2352cefadc9ca30ba49a3e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:49:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:49:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ff724ff41448f1b65f7cb4df080c84e48805903b2352cefadc9ca30ba49a3e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b6fd67fc281de7db9264e7395281441601ccc081b750bae718822f67bc333eb"} {"level":"info","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ff724ff41448f1b65f7cb4df080c84e48805903b2352cefadc9ca30ba49a3e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b6fd67fc281de7db9264e7395281441601ccc081b750bae718822f67bc333eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:49:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:49:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b6fd67fc281de7db9264e7395281441601ccc081b750bae718822f67bc333eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ff724ff41448f1b65f7cb4df080c84e48805903b2352cefadc9ca30ba49a3e4"} {"level":"info","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b6fd67fc281de7db9264e7395281441601ccc081b750bae718822f67bc333eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ff724ff41448f1b65f7cb4df080c84e48805903b2352cefadc9ca30ba49a3e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b6fd67fc281de7db9264e7395281441601ccc081b750bae718822f67bc333eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0874eea47966256b73db7e6b26028d743a4fd4eda716b9798a3b0d4a5e0c691","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:49:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b6fd67fc281de7db9264e7395281441601ccc081b750bae718822f67bc333eb"} {"level":"info","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0874eea47966256b73db7e6b26028d743a4fd4eda716b9798a3b0d4a5e0c691","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0874eea47966256b73db7e6b26028d743a4fd4eda716b9798a3b0d4a5e0c691","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:49:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0874eea47966256b73db7e6b26028d743a4fd4eda716b9798a3b0d4a5e0c691"} {"level":"info","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0874eea47966256b73db7e6b26028d743a4fd4eda716b9798a3b0d4a5e0c691","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0874eea47966256b73db7e6b26028d743a4fd4eda716b9798a3b0d4a5e0c691","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:49:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c0874eea47966256b73db7e6b26028d743a4fd4eda716b9798a3b0d4a5e0c691","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c0874eea47966256b73db7e6b26028d743a4fd4eda716b9798a3b0d4a5e0c691\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0874eea47966256b73db7e6b26028d743a4fd4eda716b9798a3b0d4a5e0c691","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0874eea47966256b73db7e6b26028d743a4fd4eda716b9798a3b0d4a5e0c691"} {"level":"debug","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0874eea47966256b73db7e6b26028d743a4fd4eda716b9798a3b0d4a5e0c691","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0874eea47966256b73db7e6b26028d743a4fd4eda716b9798a3b0d4a5e0c691"} {"level":"debug","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0874eea47966256b73db7e6b26028d743a4fd4eda716b9798a3b0d4a5e0c691","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:49:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:49:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0874eea47966256b73db7e6b26028d743a4fd4eda716b9798a3b0d4a5e0c691"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0874eea47966256b73db7e6b26028d743a4fd4eda716b9798a3b0d4a5e0c691","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0874eea47966256b73db7e6b26028d743a4fd4eda716b9798a3b0d4a5e0c691","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0874eea47966256b73db7e6b26028d743a4fd4eda716b9798a3b0d4a5e0c691"} {"level":"debug","ts":"2026-07-13T17:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd"} {"level":"debug","ts":"2026-07-13T17:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd"} {"level":"debug","ts":"2026-07-13T17:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd"} {"level":"debug","ts":"2026-07-13T17:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd"} {"level":"debug","ts":"2026-07-13T17:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd"} {"level":"debug","ts":"2026-07-13T17:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd"} {"level":"debug","ts":"2026-07-13T17:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd"} {"level":"debug","ts":"2026-07-13T17:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd"} {"level":"debug","ts":"2026-07-13T17:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd"} {"level":"debug","ts":"2026-07-13T17:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd"} {"level":"debug","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd"} {"level":"debug","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c"} {"level":"debug","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c"} {"level":"debug","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c"} {"level":"debug","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c"} {"level":"debug","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c"} {"level":"debug","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc5ee5d1f29e671880985f09d2a92174ae7be029576a1602f0113ea652f6cc0f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c"} {"level":"debug","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc5ee5d1f29e671880985f09d2a92174ae7be029576a1602f0113ea652f6cc0f"} {"level":"info","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c"} {"level":"debug","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ff724ff41448f1b65f7cb4df080c84e48805903b2352cefadc9ca30ba49a3e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ff724ff41448f1b65f7cb4df080c84e48805903b2352cefadc9ca30ba49a3e4"} {"level":"debug","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443"} {"level":"debug","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443"} {"level":"debug","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443"} {"level":"info","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fff1b3714f841be554af6dfdd16eacfb96deb30d2031e529b0f82726b3004321","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443"} {"level":"debug","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fff1b3714f841be554af6dfdd16eacfb96deb30d2031e529b0f82726b3004321"} {"level":"info","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443"} {"level":"debug","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443"} {"level":"debug","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199"} {"level":"info","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443"} {"level":"info","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199"} {"level":"info","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443"} {"level":"info","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443"} {"level":"debug","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199"} {"level":"info","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5"} {"level":"info","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443"} {"level":"debug","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77bb1fb19edbd9d864050abb24f414ec9513ac5f97f0ca22b230e34ec62fee30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c"} {"level":"debug","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77bb1fb19edbd9d864050abb24f414ec9513ac5f97f0ca22b230e34ec62fee30"} {"level":"info","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c"} {"level":"info","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c"} {"level":"debug","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8d5f13d3bd8f435760c63320e32f7a88d3e6476e993ea1f5e08dc83ca15eda4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8d5f13d3bd8f435760c63320e32f7a88d3e6476e993ea1f5e08dc83ca15eda4"} {"level":"info","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8d5f13d3bd8f435760c63320e32f7a88d3e6476e993ea1f5e08dc83ca15eda4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c"} {"level":"info","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58ca2240da2914b5b052039d6ac9676215337b0a1d85cec1662f5ea768a346e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58ca2240da2914b5b052039d6ac9676215337b0a1d85cec1662f5ea768a346e1"} {"level":"info","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58ca2240da2914b5b052039d6ac9676215337b0a1d85cec1662f5ea768a346e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8d5f13d3bd8f435760c63320e32f7a88d3e6476e993ea1f5e08dc83ca15eda4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea3796478ce6525037cf89e51e1446d837346a52f5187a3739e2faa28c9c88fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58ca2240da2914b5b052039d6ac9676215337b0a1d85cec1662f5ea768a346e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58ca2240da2914b5b052039d6ac9676215337b0a1d85cec1662f5ea768a346e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8d5f13d3bd8f435760c63320e32f7a88d3e6476e993ea1f5e08dc83ca15eda4"} {"level":"info","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58ca2240da2914b5b052039d6ac9676215337b0a1d85cec1662f5ea768a346e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8d5f13d3bd8f435760c63320e32f7a88d3e6476e993ea1f5e08dc83ca15eda4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8d5f13d3bd8f435760c63320e32f7a88d3e6476e993ea1f5e08dc83ca15eda4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8d5f13d3bd8f435760c63320e32f7a88d3e6476e993ea1f5e08dc83ca15eda4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dc8a6845295a1af504a7d0ce02cf85352e8cea03bc0fb3ff04bdac741448e21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58ca2240da2914b5b052039d6ac9676215337b0a1d85cec1662f5ea768a346e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"735ea9d9da5b600a444ac0473a1a316e010212cfc3582cfcc9d3aba6d24489ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8d5f13d3bd8f435760c63320e32f7a88d3e6476e993ea1f5e08dc83ca15eda4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea3796478ce6525037cf89e51e1446d837346a52f5187a3739e2faa28c9c88fd"} {"level":"debug","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a0956c602d3f4e09c2f3ff0807cd4d73d54d3191490f40493339d378d852efe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c"} {"level":"debug","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0874eea47966256b73db7e6b26028d743a4fd4eda716b9798a3b0d4a5e0c691","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58ca2240da2914b5b052039d6ac9676215337b0a1d85cec1662f5ea768a346e1"} {"level":"debug","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f60e9c7ee1df4fcd3278496b7588b3dbd8a36341dcdd2a97327ecd539f74848","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dc8a6845295a1af504a7d0ce02cf85352e8cea03bc0fb3ff04bdac741448e21"} {"level":"debug","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a54dba31896dc80d719bceee5ac2ce599a6c8cbf80204ee3f1215eff3bc6270","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42cc80f805b9b694f76f8e6ee216fb8b0fa32a5cdb7b437b0314f10b7047d056","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/735ea9d9da5b600a444ac0473a1a316e010212cfc3582cfcc9d3aba6d24489ef"} {"level":"debug","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dbd9c60bbe6d0c5e57c978edf953a6ae932983e20f3214f2e0a18e2efdda6ad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8d5f13d3bd8f435760c63320e32f7a88d3e6476e993ea1f5e08dc83ca15eda4"} {"level":"debug","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b6fd67fc281de7db9264e7395281441601ccc081b750bae718822f67bc333eb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a0956c602d3f4e09c2f3ff0807cd4d73d54d3191490f40493339d378d852efe"} {"level":"debug","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff37f9695f9e9aedc658e8b13d31b46d8091f39683070f68ad2b6168c802fc28","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0874eea47966256b73db7e6b26028d743a4fd4eda716b9798a3b0d4a5e0c691"} {"level":"debug","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2c6ef2cc61c5ca6fd80a3cdb4e6675a8016d96f888ad4a51d637e3f7504b680","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f60e9c7ee1df4fcd3278496b7588b3dbd8a36341dcdd2a97327ecd539f74848"} {"level":"info","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a54dba31896dc80d719bceee5ac2ce599a6c8cbf80204ee3f1215eff3bc6270"} {"level":"info","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42cc80f805b9b694f76f8e6ee216fb8b0fa32a5cdb7b437b0314f10b7047d056"} {"level":"info","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dbd9c60bbe6d0c5e57c978edf953a6ae932983e20f3214f2e0a18e2efdda6ad"} {"level":"info","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b6fd67fc281de7db9264e7395281441601ccc081b750bae718822f67bc333eb"} {"level":"info","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff37f9695f9e9aedc658e8b13d31b46d8091f39683070f68ad2b6168c802fc28"} {"level":"info","ts":"2026-07-13T17:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2c6ef2cc61c5ca6fd80a3cdb4e6675a8016d96f888ad4a51d637e3f7504b680"} {"level":"info","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f5e6c120-e92a-4332-a2ff-63d3c4004385","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36696","PortSpecifier":{"PortValue":36696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f5e6c120-e92a-4332-a2ff-63d3c4004385","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f5e6c120-e92a-4332-a2ff-63d3c4004385","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36696","PortSpecifier":{"PortValue":36696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965004,"nanos":530862163},"http":{"id":"f5e6c120-e92a-4332-a2ff-63d3c4004385","method":"POST","headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f5e6c120-e92a-4332-a2ff-63d3c4004385","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f5e6c120-e92a-4332-a2ff-63d3c4004385","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"54029952-54d8-40ca-af4e-07e776923192","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"]}} {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f5e6c120-e92a-4332-a2ff-63d3c4004385","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"54029952-54d8-40ca-af4e-07e776923192","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ea3796478ce6525037cf89e51e1446d837346a52f5187a3739e2faa28c9c88fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5e6c120-e92a-4332-a2ff-63d3c4004385","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5e6c120-e92a-4332-a2ff-63d3c4004385","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5e6c120-e92a-4332-a2ff-63d3c4004385","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-714452/sub-test-model-714452\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f5e6c120-e92a-4332-a2ff-63d3c4004385","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f5e6c120-e92a-4332-a2ff-63d3c4004385","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f5e6c120-e92a-4332-a2ff-63d3c4004385","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f5e6c120-e92a-4332-a2ff-63d3c4004385","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f5e6c120-e92a-4332-a2ff-63d3c4004385","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad20105a-e43b-4bce-9682-1f5d5ff706ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41958","PortSpecifier":{"PortValue":41958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ad20105a-e43b-4bce-9682-1f5d5ff706ec","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad20105a-e43b-4bce-9682-1f5d5ff706ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41958","PortSpecifier":{"PortValue":41958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965004,"nanos":573957737},"http":{"id":"ad20105a-e43b-4bce-9682-1f5d5ff706ec","method":"POST","headers":{":authority":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ad20105a-e43b-4bce-9682-1f5d5ff706ec","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ad20105a-e43b-4bce-9682-1f5d5ff706ec","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"54029952-54d8-40ca-af4e-07e776923192","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"]}} {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ad20105a-e43b-4bce-9682-1f5d5ff706ec","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"54029952-54d8-40ca-af4e-07e776923192","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad20105a-e43b-4bce-9682-1f5d5ff706ec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad20105a-e43b-4bce-9682-1f5d5ff706ec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad20105a-e43b-4bce-9682-1f5d5ff706ec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-31a784/sub-test-model-31a784\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ad20105a-e43b-4bce-9682-1f5d5ff706ec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad20105a-e43b-4bce-9682-1f5d5ff706ec","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad20105a-e43b-4bce-9682-1f5d5ff706ec","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad20105a-e43b-4bce-9682-1f5d5ff706ec","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad20105a-e43b-4bce-9682-1f5d5ff706ec","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d9cfc78-6ade-4151-a9df-61eb8caac696","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36704","PortSpecifier":{"PortValue":36704}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6d9cfc78-6ade-4151-a9df-61eb8caac696","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d9cfc78-6ade-4151-a9df-61eb8caac696","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36704","PortSpecifier":{"PortValue":36704}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965004,"nanos":617516426},"http":{"id":"6d9cfc78-6ade-4151-a9df-61eb8caac696","method":"GET","headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6d9cfc78-6ade-4151-a9df-61eb8caac696","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Yur95vVmQMxLQnF2_UxF6cNHR9V4pWBPzN5geg1Phr4XGnicuqJ8ZN7vhz4t"} {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6d9cfc78-6ade-4151-a9df-61eb8caac696","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Yur95vVmQMxLQnF2_UxF6cNHR9V4pWBPzN5geg1Phr4XGnicuqJ8ZN7vhz4t\"}"} {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6d9cfc78-6ade-4151-a9df-61eb8caac696","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"963a88e1-a9e1-4912-9713-d90e66b64b49","keyName":"e2e-sub-iso-70db52","subscription":"e2e-a-only-138c93","tenant":"e2e-shared-a-714452","userId":"963a88e1-a9e1-4912-9713-d90e66b64b49","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6d9cfc78-6ade-4151-a9df-61eb8caac696","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d9cfc78-6ade-4151-a9df-61eb8caac696","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d9cfc78-6ade-4151-a9df-61eb8caac696","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d9cfc78-6ade-4151-a9df-61eb8caac696","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-714452/sub-test-model-714452\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6d9cfc78-6ade-4151-a9df-61eb8caac696","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d9cfc78-6ade-4151-a9df-61eb8caac696","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d9cfc78-6ade-4151-a9df-61eb8caac696","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d9cfc78-6ade-4151-a9df-61eb8caac696","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-138c93"} {"level":"info","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d9cfc78-6ade-4151-a9df-61eb8caac696","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d9cfc78-6ade-4151-a9df-61eb8caac696","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca453ba9-0f34-4acf-bebb-11151934e8a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41970","PortSpecifier":{"PortValue":41970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ca453ba9-0f34-4acf-bebb-11151934e8a1","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca453ba9-0f34-4acf-bebb-11151934e8a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41970","PortSpecifier":{"PortValue":41970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965004,"nanos":661525299},"http":{"id":"ca453ba9-0f34-4acf-bebb-11151934e8a1","method":"GET","headers":{":authority":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ca453ba9-0f34-4acf-bebb-11151934e8a1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14dYHZuKl2yTSDsqu_j77tL48edH7rA9uppgZjKjdcwf6GLIpzUpeGW7IZWWG"} {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ca453ba9-0f34-4acf-bebb-11151934e8a1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-31a784.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14dYHZuKl2yTSDsqu_j77tL48edH7rA9uppgZjKjdcwf6GLIpzUpeGW7IZWWG\"}"} {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ca453ba9-0f34-4acf-bebb-11151934e8a1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-31a784.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9e0d9501-9dc8-4498-a9b4-8a211f3cd871","keyName":"e2e-sub-iso-7b8afc","subscription":"e2e-b-only-138c93","tenant":"e2e-shared-b-31a784","userId":"9e0d9501-9dc8-4498-a9b4-8a211f3cd871","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ca453ba9-0f34-4acf-bebb-11151934e8a1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca453ba9-0f34-4acf-bebb-11151934e8a1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca453ba9-0f34-4acf-bebb-11151934e8a1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca453ba9-0f34-4acf-bebb-11151934e8a1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-31a784/sub-test-model-31a784\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca453ba9-0f34-4acf-bebb-11151934e8a1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-138c93"} {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca453ba9-0f34-4acf-bebb-11151934e8a1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca453ba9-0f34-4acf-bebb-11151934e8a1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ca453ba9-0f34-4acf-bebb-11151934e8a1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca453ba9-0f34-4acf-bebb-11151934e8a1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T17:50:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca453ba9-0f34-4acf-bebb-11151934e8a1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8fd1f379-2bb4-45a7-940f-79540103c68b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58574","PortSpecifier":{"PortValue":58574}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8fd1f379-2bb4-45a7-940f-79540103c68b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8fd1f379-2bb4-45a7-940f-79540103c68b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58574","PortSpecifier":{"PortValue":58574}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965014,"nanos":618216234},"http":{"id":"8fd1f379-2bb4-45a7-940f-79540103c68b","method":"POST","headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8fd1f379-2bb4-45a7-940f-79540103c68b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8fd1f379-2bb4-45a7-940f-79540103c68b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"54029952-54d8-40ca-af4e-07e776923192","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"]}} {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8fd1f379-2bb4-45a7-940f-79540103c68b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"54029952-54d8-40ca-af4e-07e776923192","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ea3796478ce6525037cf89e51e1446d837346a52f5187a3739e2faa28c9c88fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fd1f379-2bb4-45a7-940f-79540103c68b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fd1f379-2bb4-45a7-940f-79540103c68b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fd1f379-2bb4-45a7-940f-79540103c68b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-714452/sub-test-model-714452\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8fd1f379-2bb4-45a7-940f-79540103c68b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fd1f379-2bb4-45a7-940f-79540103c68b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fd1f379-2bb4-45a7-940f-79540103c68b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8fd1f379-2bb4-45a7-940f-79540103c68b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8fd1f379-2bb4-45a7-940f-79540103c68b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5aa2f777-16d6-4fd9-8408-8c5e3463d26b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51306","PortSpecifier":{"PortValue":51306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5aa2f777-16d6-4fd9-8408-8c5e3463d26b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5aa2f777-16d6-4fd9-8408-8c5e3463d26b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51306","PortSpecifier":{"PortValue":51306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965014,"nanos":653893970},"http":{"id":"5aa2f777-16d6-4fd9-8408-8c5e3463d26b","method":"POST","headers":{":authority":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5aa2f777-16d6-4fd9-8408-8c5e3463d26b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5aa2f777-16d6-4fd9-8408-8c5e3463d26b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"54029952-54d8-40ca-af4e-07e776923192","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"]}} {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5aa2f777-16d6-4fd9-8408-8c5e3463d26b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"54029952-54d8-40ca-af4e-07e776923192","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5aa2f777-16d6-4fd9-8408-8c5e3463d26b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5aa2f777-16d6-4fd9-8408-8c5e3463d26b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5aa2f777-16d6-4fd9-8408-8c5e3463d26b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-31a784/sub-test-model-31a784\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5aa2f777-16d6-4fd9-8408-8c5e3463d26b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5aa2f777-16d6-4fd9-8408-8c5e3463d26b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5aa2f777-16d6-4fd9-8408-8c5e3463d26b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5aa2f777-16d6-4fd9-8408-8c5e3463d26b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5aa2f777-16d6-4fd9-8408-8c5e3463d26b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1a5a922-65ce-4982-96ef-5b0197a9f5dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58582","PortSpecifier":{"PortValue":58582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f1a5a922-65ce-4982-96ef-5b0197a9f5dc","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1a5a922-65ce-4982-96ef-5b0197a9f5dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58582","PortSpecifier":{"PortValue":58582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965014,"nanos":690588867},"http":{"id":"f1a5a922-65ce-4982-96ef-5b0197a9f5dc","method":"POST","headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f1a5a922-65ce-4982-96ef-5b0197a9f5dc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-12ScOMK4xrX1S4qYu_hz42ai89FUpVITHSLVT7pHAu0Y9fBbIKGMPHp6CI8P9"} {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f1a5a922-65ce-4982-96ef-5b0197a9f5dc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-12ScOMK4xrX1S4qYu_hz42ai89FUpVITHSLVT7pHAu0Y9fBbIKGMPHp6CI8P9\"}"} {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f1a5a922-65ce-4982-96ef-5b0197a9f5dc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1886e26a-2f89-4f8a-8592-bb5b59bc7d97","keyName":"e2e-sub-iso-0eb578","subscription":"e2e-shared-sub-a44da0","tenant":"e2e-shared-a-714452","userId":"1886e26a-2f89-4f8a-8592-bb5b59bc7d97","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f1a5a922-65ce-4982-96ef-5b0197a9f5dc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1a5a922-65ce-4982-96ef-5b0197a9f5dc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1a5a922-65ce-4982-96ef-5b0197a9f5dc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1a5a922-65ce-4982-96ef-5b0197a9f5dc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-714452/sub-test-model-714452\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f1a5a922-65ce-4982-96ef-5b0197a9f5dc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1a5a922-65ce-4982-96ef-5b0197a9f5dc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1a5a922-65ce-4982-96ef-5b0197a9f5dc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-a44da0"} {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1a5a922-65ce-4982-96ef-5b0197a9f5dc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1a5a922-65ce-4982-96ef-5b0197a9f5dc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1a5a922-65ce-4982-96ef-5b0197a9f5dc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aafeb142-ef57-47c9-ab6c-35bdfc771e17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51308","PortSpecifier":{"PortValue":51308}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aafeb142-ef57-47c9-ab6c-35bdfc771e17","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aafeb142-ef57-47c9-ab6c-35bdfc771e17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51308","PortSpecifier":{"PortValue":51308}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965014,"nanos":722406292},"http":{"id":"aafeb142-ef57-47c9-ab6c-35bdfc771e17","method":"POST","headers":{":authority":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aafeb142-ef57-47c9-ab6c-35bdfc771e17","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1TKRyXAUqbaWqQUU9_Fb2PYSWhkoayVb4lcdu4VPBxaxMLc6iAqINNhnGphMx"} {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aafeb142-ef57-47c9-ab6c-35bdfc771e17","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-31a784.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1TKRyXAUqbaWqQUU9_Fb2PYSWhkoayVb4lcdu4VPBxaxMLc6iAqINNhnGphMx\"}"} {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aafeb142-ef57-47c9-ab6c-35bdfc771e17","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-31a784.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5c8dfd9c-2665-41b6-b066-01fd4a141454","keyName":"e2e-sub-iso-c6f431","subscription":"e2e-shared-sub-a44da0","tenant":"e2e-shared-b-31a784","userId":"5c8dfd9c-2665-41b6-b066-01fd4a141454","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aafeb142-ef57-47c9-ab6c-35bdfc771e17","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aafeb142-ef57-47c9-ab6c-35bdfc771e17","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aafeb142-ef57-47c9-ab6c-35bdfc771e17","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aafeb142-ef57-47c9-ab6c-35bdfc771e17","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-31a784/sub-test-model-31a784\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"aafeb142-ef57-47c9-ab6c-35bdfc771e17","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aafeb142-ef57-47c9-ab6c-35bdfc771e17","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aafeb142-ef57-47c9-ab6c-35bdfc771e17","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aafeb142-ef57-47c9-ab6c-35bdfc771e17","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-a44da0"} {"level":"info","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aafeb142-ef57-47c9-ab6c-35bdfc771e17","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T17:50:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aafeb142-ef57-47c9-ab6c-35bdfc771e17","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T17:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b6fd67fc281de7db9264e7395281441601ccc081b750bae718822f67bc333eb"} {"level":"info","ts":"2026-07-13T17:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0874eea47966256b73db7e6b26028d743a4fd4eda716b9798a3b0d4a5e0c691"} {"level":"info","ts":"2026-07-13T17:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fff1b3714f841be554af6dfdd16eacfb96deb30d2031e529b0f82726b3004321"} {"level":"info","ts":"2026-07-13T17:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a54dba31896dc80d719bceee5ac2ce599a6c8cbf80204ee3f1215eff3bc6270"} {"level":"info","ts":"2026-07-13T17:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ff724ff41448f1b65f7cb4df080c84e48805903b2352cefadc9ca30ba49a3e4"} {"level":"info","ts":"2026-07-13T17:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc5ee5d1f29e671880985f09d2a92174ae7be029576a1602f0113ea652f6cc0f"} {"level":"info","ts":"2026-07-13T17:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4de1163d4372aa33630234b5597803d1f0d55a4c3e97d29aa8c0407630fb164c"} {"level":"info","ts":"2026-07-13T17:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f82e985c67ffc97436a346244981e3bde27c35699e041604ba5988d3361df3fd"} {"level":"info","ts":"2026-07-13T17:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2dc8a6845295a1af504a7d0ce02cf85352e8cea03bc0fb3ff04bdac741448e21"} {"level":"info","ts":"2026-07-13T17:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f60e9c7ee1df4fcd3278496b7588b3dbd8a36341dcdd2a97327ecd539f74848"} {"level":"info","ts":"2026-07-13T17:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5dbd9c60bbe6d0c5e57c978edf953a6ae932983e20f3214f2e0a18e2efdda6ad"} {"level":"info","ts":"2026-07-13T17:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f2c6ef2cc61c5ca6fd80a3cdb4e6675a8016d96f888ad4a51d637e3f7504b680"} {"level":"info","ts":"2026-07-13T17:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fff3c7d4679ec26a3c53dabd06fa2aed85715cdae92da2ce964ee0307d05a199"} {"level":"info","ts":"2026-07-13T17:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77bb1fb19edbd9d864050abb24f414ec9513ac5f97f0ca22b230e34ec62fee30"} {"level":"info","ts":"2026-07-13T17:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8d5f13d3bd8f435760c63320e32f7a88d3e6476e993ea1f5e08dc83ca15eda4"} {"level":"info","ts":"2026-07-13T17:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42cc80f805b9b694f76f8e6ee216fb8b0fa32a5cdb7b437b0314f10b7047d056"} {"level":"debug","ts":"2026-07-13T17:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17"} {"level":"debug","ts":"2026-07-13T17:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17"} {"level":"debug","ts":"2026-07-13T17:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17"} {"level":"info","ts":"2026-07-13T17:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17"} {"level":"debug","ts":"2026-07-13T17:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17"} {"level":"debug","ts":"2026-07-13T17:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17"} {"level":"debug","ts":"2026-07-13T17:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17"} {"level":"debug","ts":"2026-07-13T17:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17"} {"level":"debug","ts":"2026-07-13T17:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17"} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17"} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17"} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32"} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32"} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32"} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32"} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32"} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32"} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32"} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32"} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32"} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdf6282e689381510a332d84bdbb41a62fef4547c0feb132443c953f523a3726","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdf6282e689381510a332d84bdbb41a62fef4547c0feb132443c953f523a3726","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdf6282e689381510a332d84bdbb41a62fef4547c0feb132443c953f523a3726","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdf6282e689381510a332d84bdbb41a62fef4547c0feb132443c953f523a3726","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdf6282e689381510a332d84bdbb41a62fef4547c0feb132443c953f523a3726"} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdf6282e689381510a332d84bdbb41a62fef4547c0feb132443c953f523a3726"} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdf6282e689381510a332d84bdbb41a62fef4547c0feb132443c953f523a3726","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdf6282e689381510a332d84bdbb41a62fef4547c0feb132443c953f523a3726"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdf6282e689381510a332d84bdbb41a62fef4547c0feb132443c953f523a3726","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32"} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdf6282e689381510a332d84bdbb41a62fef4547c0feb132443c953f523a3726","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdf6282e689381510a332d84bdbb41a62fef4547c0feb132443c953f523a3726"} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdf6282e689381510a332d84bdbb41a62fef4547c0feb132443c953f523a3726","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdf6282e689381510a332d84bdbb41a62fef4547c0feb132443c953f523a3726","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdf6282e689381510a332d84bdbb41a62fef4547c0feb132443c953f523a3726"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdf6282e689381510a332d84bdbb41a62fef4547c0feb132443c953f523a3726","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1790964f2c00436fbe6c3120f3e783a20e3125b0a5c60aeaa059c2fd0d968ee5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32"} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1790964f2c00436fbe6c3120f3e783a20e3125b0a5c60aeaa059c2fd0d968ee5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdf6282e689381510a332d84bdbb41a62fef4547c0feb132443c953f523a3726"} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdf6282e689381510a332d84bdbb41a62fef4547c0feb132443c953f523a3726","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1790964f2c00436fbe6c3120f3e783a20e3125b0a5c60aeaa059c2fd0d968ee5"} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1790964f2c00436fbe6c3120f3e783a20e3125b0a5c60aeaa059c2fd0d968ee5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1790964f2c00436fbe6c3120f3e783a20e3125b0a5c60aeaa059c2fd0d968ee5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1790964f2c00436fbe6c3120f3e783a20e3125b0a5c60aeaa059c2fd0d968ee5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918"} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1790964f2c00436fbe6c3120f3e783a20e3125b0a5c60aeaa059c2fd0d968ee5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32"} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"013e9617076d91feb79f72ba4a51cac5a7db09148cc010610a8805a36a8d7f12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1790964f2c00436fbe6c3120f3e783a20e3125b0a5c60aeaa059c2fd0d968ee5"} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"013e9617076d91feb79f72ba4a51cac5a7db09148cc010610a8805a36a8d7f12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"013e9617076d91feb79f72ba4a51cac5a7db09148cc010610a8805a36a8d7f12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"013e9617076d91feb79f72ba4a51cac5a7db09148cc010610a8805a36a8d7f12","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918"} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"013e9617076d91feb79f72ba4a51cac5a7db09148cc010610a8805a36a8d7f12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/013e9617076d91feb79f72ba4a51cac5a7db09148cc010610a8805a36a8d7f12"} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"013e9617076d91feb79f72ba4a51cac5a7db09148cc010610a8805a36a8d7f12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918"} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"013e9617076d91feb79f72ba4a51cac5a7db09148cc010610a8805a36a8d7f12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["013e9617076d91feb79f72ba4a51cac5a7db09148cc010610a8805a36a8d7f12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2"} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"013e9617076d91feb79f72ba4a51cac5a7db09148cc010610a8805a36a8d7f12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/013e9617076d91feb79f72ba4a51cac5a7db09148cc010610a8805a36a8d7f12"} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"013e9617076d91feb79f72ba4a51cac5a7db09148cc010610a8805a36a8d7f12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2"} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"faf7129059723e943863cb6c718ef27fc5bb0fd65a11239ca0d0957768d5cfa1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"faf7129059723e943863cb6c718ef27fc5bb0fd65a11239ca0d0957768d5cfa1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/013e9617076d91feb79f72ba4a51cac5a7db09148cc010610a8805a36a8d7f12"} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"faf7129059723e943863cb6c718ef27fc5bb0fd65a11239ca0d0957768d5cfa1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faf7129059723e943863cb6c718ef27fc5bb0fd65a11239ca0d0957768d5cfa1"} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"faf7129059723e943863cb6c718ef27fc5bb0fd65a11239ca0d0957768d5cfa1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2"} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"faf7129059723e943863cb6c718ef27fc5bb0fd65a11239ca0d0957768d5cfa1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faf7129059723e943863cb6c718ef27fc5bb0fd65a11239ca0d0957768d5cfa1"} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"faf7129059723e943863cb6c718ef27fc5bb0fd65a11239ca0d0957768d5cfa1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["faf7129059723e943863cb6c718ef27fc5bb0fd65a11239ca0d0957768d5cfa1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2"} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"faf7129059723e943863cb6c718ef27fc5bb0fd65a11239ca0d0957768d5cfa1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"faf7129059723e943863cb6c718ef27fc5bb0fd65a11239ca0d0957768d5cfa1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2"} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faf7129059723e943863cb6c718ef27fc5bb0fd65a11239ca0d0957768d5cfa1"} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2"} {"level":"debug","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2"} {"level":"debug","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2"} {"level":"debug","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2"} {"level":"debug","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2"} {"level":"info","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2"} {"level":"debug","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2"} {"level":"debug","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2"} {"level":"debug","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2"} {"level":"debug","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2"} {"level":"debug","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2"} {"level":"debug","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2"} {"level":"debug","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2"} {"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3a0b773fb14df6332b1c67115e7313bb01599924c6c22e0846ae9e047aa107d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3a0b773fb14df6332b1c67115e7313bb01599924c6c22e0846ae9e047aa107d"} {"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3a0b773fb14df6332b1c67115e7313bb01599924c6c22e0846ae9e047aa107d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3a0b773fb14df6332b1c67115e7313bb01599924c6c22e0846ae9e047aa107d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3a0b773fb14df6332b1c67115e7313bb01599924c6c22e0846ae9e047aa107d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3a0b773fb14df6332b1c67115e7313bb01599924c6c22e0846ae9e047aa107d"} {"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3a0b773fb14df6332b1c67115e7313bb01599924c6c22e0846ae9e047aa107d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3a0b773fb14df6332b1c67115e7313bb01599924c6c22e0846ae9e047aa107d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3a0b773fb14df6332b1c67115e7313bb01599924c6c22e0846ae9e047aa107d"} {"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3a0b773fb14df6332b1c67115e7313bb01599924c6c22e0846ae9e047aa107d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3a0b773fb14df6332b1c67115e7313bb01599924c6c22e0846ae9e047aa107d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3a0b773fb14df6332b1c67115e7313bb01599924c6c22e0846ae9e047aa107d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3a0b773fb14df6332b1c67115e7313bb01599924c6c22e0846ae9e047aa107d"} {"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3a0b773fb14df6332b1c67115e7313bb01599924c6c22e0846ae9e047aa107d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3a0b773fb14df6332b1c67115e7313bb01599924c6c22e0846ae9e047aa107d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8"} {"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3a0b773fb14df6332b1c67115e7313bb01599924c6c22e0846ae9e047aa107d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3a0b773fb14df6332b1c67115e7313bb01599924c6c22e0846ae9e047aa107d"} {"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3a0b773fb14df6332b1c67115e7313bb01599924c6c22e0846ae9e047aa107d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8"} {"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8"} {"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bc6ab7d0cd64c0e3c3f2afdf989e565315302af645696406b707f4efe1339ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bc6ab7d0cd64c0e3c3f2afdf989e565315302af645696406b707f4efe1339ea"} {"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bc6ab7d0cd64c0e3c3f2afdf989e565315302af645696406b707f4efe1339ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8"} {"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bc6ab7d0cd64c0e3c3f2afdf989e565315302af645696406b707f4efe1339ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bc6ab7d0cd64c0e3c3f2afdf989e565315302af645696406b707f4efe1339ea"} {"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bc6ab7d0cd64c0e3c3f2afdf989e565315302af645696406b707f4efe1339ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bc6ab7d0cd64c0e3c3f2afdf989e565315302af645696406b707f4efe1339ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8"} {"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bc6ab7d0cd64c0e3c3f2afdf989e565315302af645696406b707f4efe1339ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bc6ab7d0cd64c0e3c3f2afdf989e565315302af645696406b707f4efe1339ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1e90f327113f8ea9729b952af5212681a9b9b0d835f1bb7ea48d8c3d1c4822d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1e90f327113f8ea9729b952af5212681a9b9b0d835f1bb7ea48d8c3d1c4822d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7f64a9774c859c6b8b21b204d0dba501a97fffb22011ab39221b4c81001eb76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8"} {"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7f64a9774c859c6b8b21b204d0dba501a97fffb22011ab39221b4c81001eb76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1e90f327113f8ea9729b952af5212681a9b9b0d835f1bb7ea48d8c3d1c4822d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7f64a9774c859c6b8b21b204d0dba501a97fffb22011ab39221b4c81001eb76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1e90f327113f8ea9729b952af5212681a9b9b0d835f1bb7ea48d8c3d1c4822d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bc6ab7d0cd64c0e3c3f2afdf989e565315302af645696406b707f4efe1339ea"} {"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7f64a9774c859c6b8b21b204d0dba501a97fffb22011ab39221b4c81001eb76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1e90f327113f8ea9729b952af5212681a9b9b0d835f1bb7ea48d8c3d1c4822d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1e90f327113f8ea9729b952af5212681a9b9b0d835f1bb7ea48d8c3d1c4822d"} {"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1e90f327113f8ea9729b952af5212681a9b9b0d835f1bb7ea48d8c3d1c4822d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7f64a9774c859c6b8b21b204d0dba501a97fffb22011ab39221b4c81001eb76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7f64a9774c859c6b8b21b204d0dba501a97fffb22011ab39221b4c81001eb76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cab41fb65368e83144431559521eb60275cfe276e44fa136c1b7ee4875ed11b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7f64a9774c859c6b8b21b204d0dba501a97fffb22011ab39221b4c81001eb76"} {"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cab41fb65368e83144431559521eb60275cfe276e44fa136c1b7ee4875ed11b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1e90f327113f8ea9729b952af5212681a9b9b0d835f1bb7ea48d8c3d1c4822d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1e90f327113f8ea9729b952af5212681a9b9b0d835f1bb7ea48d8c3d1c4822d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8"} {"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1e90f327113f8ea9729b952af5212681a9b9b0d835f1bb7ea48d8c3d1c4822d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7f64a9774c859c6b8b21b204d0dba501a97fffb22011ab39221b4c81001eb76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7f64a9774c859c6b8b21b204d0dba501a97fffb22011ab39221b4c81001eb76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cab41fb65368e83144431559521eb60275cfe276e44fa136c1b7ee4875ed11b"} {"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7f64a9774c859c6b8b21b204d0dba501a97fffb22011ab39221b4c81001eb76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cab41fb65368e83144431559521eb60275cfe276e44fa136c1b7ee4875ed11b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cab41fb65368e83144431559521eb60275cfe276e44fa136c1b7ee4875ed11b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cab41fb65368e83144431559521eb60275cfe276e44fa136c1b7ee4875ed11b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1e90f327113f8ea9729b952af5212681a9b9b0d835f1bb7ea48d8c3d1c4822d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1e90f327113f8ea9729b952af5212681a9b9b0d835f1bb7ea48d8c3d1c4822d"} {"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1e90f327113f8ea9729b952af5212681a9b9b0d835f1bb7ea48d8c3d1c4822d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7f64a9774c859c6b8b21b204d0dba501a97fffb22011ab39221b4c81001eb76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7f64a9774c859c6b8b21b204d0dba501a97fffb22011ab39221b4c81001eb76"} {"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7f64a9774c859c6b8b21b204d0dba501a97fffb22011ab39221b4c81001eb76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cab41fb65368e83144431559521eb60275cfe276e44fa136c1b7ee4875ed11b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cab41fb65368e83144431559521eb60275cfe276e44fa136c1b7ee4875ed11b"} {"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cab41fb65368e83144431559521eb60275cfe276e44fa136c1b7ee4875ed11b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d"} {"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1e90f327113f8ea9729b952af5212681a9b9b0d835f1bb7ea48d8c3d1c4822d"} {"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1e90f327113f8ea9729b952af5212681a9b9b0d835f1bb7ea48d8c3d1c4822d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1e90f327113f8ea9729b952af5212681a9b9b0d835f1bb7ea48d8c3d1c4822d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7f64a9774c859c6b8b21b204d0dba501a97fffb22011ab39221b4c81001eb76"} {"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1e90f327113f8ea9729b952af5212681a9b9b0d835f1bb7ea48d8c3d1c4822d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7f64a9774c859c6b8b21b204d0dba501a97fffb22011ab39221b4c81001eb76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7f64a9774c859c6b8b21b204d0dba501a97fffb22011ab39221b4c81001eb76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cab41fb65368e83144431559521eb60275cfe276e44fa136c1b7ee4875ed11b"} {"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d"} {"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7f64a9774c859c6b8b21b204d0dba501a97fffb22011ab39221b4c81001eb76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cab41fb65368e83144431559521eb60275cfe276e44fa136c1b7ee4875ed11b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cab41fb65368e83144431559521eb60275cfe276e44fa136c1b7ee4875ed11b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1e90f327113f8ea9729b952af5212681a9b9b0d835f1bb7ea48d8c3d1c4822d"} {"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7f64a9774c859c6b8b21b204d0dba501a97fffb22011ab39221b4c81001eb76"} {"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cab41fb65368e83144431559521eb60275cfe276e44fa136c1b7ee4875ed11b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cab41fb65368e83144431559521eb60275cfe276e44fa136c1b7ee4875ed11b"} {"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1e90f327113f8ea9729b952af5212681a9b9b0d835f1bb7ea48d8c3d1c4822d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7f64a9774c859c6b8b21b204d0dba501a97fffb22011ab39221b4c81001eb76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cab41fb65368e83144431559521eb60275cfe276e44fa136c1b7ee4875ed11b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d"} {"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d"} {"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a"} {"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a"} {"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d"} {"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a"} {"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a"} {"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a"} {"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a"} {"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a"} {"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918"} {"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918"} {"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918"} {"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918"} {"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918"} {"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918"} {"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1e90f327113f8ea9729b952af5212681a9b9b0d835f1bb7ea48d8c3d1c4822d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918"} {"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1e90f327113f8ea9729b952af5212681a9b9b0d835f1bb7ea48d8c3d1c4822d"} {"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918"} {"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d"} {"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d"} {"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d"} {"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d"} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d"} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d"} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17"} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d"} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff37f9695f9e9aedc658e8b13d31b46d8091f39683070f68ad2b6168c802fc28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17"} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d"} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff37f9695f9e9aedc658e8b13d31b46d8091f39683070f68ad2b6168c802fc28"} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c"} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c"} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a0956c602d3f4e09c2f3ff0807cd4d73d54d3191490f40493339d378d852efe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7f64a9774c859c6b8b21b204d0dba501a97fffb22011ab39221b4c81001eb76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c"} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a0956c602d3f4e09c2f3ff0807cd4d73d54d3191490f40493339d378d852efe"} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7f64a9774c859c6b8b21b204d0dba501a97fffb22011ab39221b4c81001eb76"} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1790964f2c00436fbe6c3120f3e783a20e3125b0a5c60aeaa059c2fd0d968ee5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1790964f2c00436fbe6c3120f3e783a20e3125b0a5c60aeaa059c2fd0d968ee5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1790964f2c00436fbe6c3120f3e783a20e3125b0a5c60aeaa059c2fd0d968ee5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1790964f2c00436fbe6c3120f3e783a20e3125b0a5c60aeaa059c2fd0d968ee5"} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1790964f2c00436fbe6c3120f3e783a20e3125b0a5c60aeaa059c2fd0d968ee5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1790964f2c00436fbe6c3120f3e783a20e3125b0a5c60aeaa059c2fd0d968ee5"} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1790964f2c00436fbe6c3120f3e783a20e3125b0a5c60aeaa059c2fd0d968ee5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1790964f2c00436fbe6c3120f3e783a20e3125b0a5c60aeaa059c2fd0d968ee5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1790964f2c00436fbe6c3120f3e783a20e3125b0a5c60aeaa059c2fd0d968ee5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1790964f2c00436fbe6c3120f3e783a20e3125b0a5c60aeaa059c2fd0d968ee5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1790964f2c00436fbe6c3120f3e783a20e3125b0a5c60aeaa059c2fd0d968ee5"} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32"} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32"} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32"} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58ca2240da2914b5b052039d6ac9676215337b0a1d85cec1662f5ea768a346e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32"} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58ca2240da2914b5b052039d6ac9676215337b0a1d85cec1662f5ea768a346e1"} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"735ea9d9da5b600a444ac0473a1a316e010212cfc3582cfcc9d3aba6d24489ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32"} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/735ea9d9da5b600a444ac0473a1a316e010212cfc3582cfcc9d3aba6d24489ef"} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cab41fb65368e83144431559521eb60275cfe276e44fa136c1b7ee4875ed11b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32"} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea3796478ce6525037cf89e51e1446d837346a52f5187a3739e2faa28c9c88fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2"} {"level":"error","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cab41fb65368e83144431559521eb60275cfe276e44fa136c1b7ee4875ed11b"} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"faf7129059723e943863cb6c718ef27fc5bb0fd65a11239ca0d0957768d5cfa1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32"} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bc6ab7d0cd64c0e3c3f2afdf989e565315302af645696406b707f4efe1339ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea3796478ce6525037cf89e51e1446d837346a52f5187a3739e2faa28c9c88fd"} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faf7129059723e943863cb6c718ef27fc5bb0fd65a11239ca0d0957768d5cfa1"} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3a0b773fb14df6332b1c67115e7313bb01599924c6c22e0846ae9e047aa107d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bc6ab7d0cd64c0e3c3f2afdf989e565315302af645696406b707f4efe1339ea"} {"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a"} {"level":"info","ts":"2026-07-13T17:51:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5"} {"level":"debug","ts":"2026-07-13T17:51:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"013e9617076d91feb79f72ba4a51cac5a7db09148cc010610a8805a36a8d7f12","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:51:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3a0b773fb14df6332b1c67115e7313bb01599924c6c22e0846ae9e047aa107d"} {"level":"info","ts":"2026-07-13T17:51:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8"} {"level":"debug","ts":"2026-07-13T17:51:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdf6282e689381510a332d84bdbb41a62fef4547c0feb132443c953f523a3726","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T17:51:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T17:51:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/013e9617076d91feb79f72ba4a51cac5a7db09148cc010610a8805a36a8d7f12"} {"level":"info","ts":"2026-07-13T17:51:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdf6282e689381510a332d84bdbb41a62fef4547c0feb132443c953f523a3726"} {"level":"info","ts":"2026-07-13T17:51:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443"} {"level":"info","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20ab9d7a-59c6-4f3e-aa29-bae380d01314","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37772","PortSpecifier":{"PortValue":37772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"20ab9d7a-59c6-4f3e-aa29-bae380d01314","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20ab9d7a-59c6-4f3e-aa29-bae380d01314","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37772","PortSpecifier":{"PortValue":37772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965080,"nanos":207506524},"http":{"id":"20ab9d7a-59c6-4f3e-aa29-bae380d01314","method":"POST","headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"20ab9d7a-59c6-4f3e-aa29-bae380d01314","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"20ab9d7a-59c6-4f3e-aa29-bae380d01314","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"54029952-54d8-40ca-af4e-07e776923192","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"]}} {"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"20ab9d7a-59c6-4f3e-aa29-bae380d01314","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"54029952-54d8-40ca-af4e-07e776923192","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ea3796478ce6525037cf89e51e1446d837346a52f5187a3739e2faa28c9c88fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20ab9d7a-59c6-4f3e-aa29-bae380d01314","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20ab9d7a-59c6-4f3e-aa29-bae380d01314","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20ab9d7a-59c6-4f3e-aa29-bae380d01314","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-714452/rate-test-model-714452\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"20ab9d7a-59c6-4f3e-aa29-bae380d01314","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20ab9d7a-59c6-4f3e-aa29-bae380d01314","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20ab9d7a-59c6-4f3e-aa29-bae380d01314","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20ab9d7a-59c6-4f3e-aa29-bae380d01314","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20ab9d7a-59c6-4f3e-aa29-bae380d01314","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"743c72c7-9d55-4df5-9f30-5d69c54e7d36","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:42514","PortSpecifier":{"PortValue":42514}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"743c72c7-9d55-4df5-9f30-5d69c54e7d36","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"743c72c7-9d55-4df5-9f30-5d69c54e7d36","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:42514","PortSpecifier":{"PortValue":42514}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965080,"nanos":251936996},"http":{"id":"743c72c7-9d55-4df5-9f30-5d69c54e7d36","method":"POST","headers":{":authority":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"743c72c7-9d55-4df5-9f30-5d69c54e7d36","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"743c72c7-9d55-4df5-9f30-5d69c54e7d36","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"54029952-54d8-40ca-af4e-07e776923192","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"]}} {"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"743c72c7-9d55-4df5-9f30-5d69c54e7d36","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"54029952-54d8-40ca-af4e-07e776923192","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"743c72c7-9d55-4df5-9f30-5d69c54e7d36","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"743c72c7-9d55-4df5-9f30-5d69c54e7d36","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"743c72c7-9d55-4df5-9f30-5d69c54e7d36","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-31a784/rate-test-model-31a784\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"743c72c7-9d55-4df5-9f30-5d69c54e7d36","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"743c72c7-9d55-4df5-9f30-5d69c54e7d36","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"743c72c7-9d55-4df5-9f30-5d69c54e7d36","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"743c72c7-9d55-4df5-9f30-5d69c54e7d36","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"743c72c7-9d55-4df5-9f30-5d69c54e7d36","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"006af1c0-44ba-403a-8581-d3e5017ece4d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37788","PortSpecifier":{"PortValue":37788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"006af1c0-44ba-403a-8581-d3e5017ece4d","method":"POST","path":"/ai-tenant-e2e-shared-a-714452/rate-test-model-714452/v1/completions","host":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"006af1c0-44ba-403a-8581-d3e5017ece4d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37788","PortSpecifier":{"PortValue":37788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965080,"nanos":293651958},"http":{"id":"006af1c0-44ba-403a-8581-d3e5017ece4d","method":"POST","headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-714452/rate-test-model-714452/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"006af1c0-44ba-403a-8581-d3e5017ece4d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8re2IPsUSH3rl33S_UnHYL1Xi48KCdt4qVUO4NJoGT2BbbZF3lcQ26fdJ1GX"} {"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"006af1c0-44ba-403a-8581-d3e5017ece4d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8re2IPsUSH3rl33S_UnHYL1Xi48KCdt4qVUO4NJoGT2BbbZF3lcQ26fdJ1GX\"}"} {"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"006af1c0-44ba-403a-8581-d3e5017ece4d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d0b74bb0-8f30-4d41-a479-822df81f96db","keyName":"e2e-rate-a-1d4512","subscription":"e2e-rate-iso-a-1d4512","tenant":"e2e-shared-a-714452","userId":"d0b74bb0-8f30-4d41-a479-822df81f96db","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"006af1c0-44ba-403a-8581-d3e5017ece4d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-714452/rate-test-model-714452\",\"requestedSubscription\":\"e2e-rate-iso-a-1d4512\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"006af1c0-44ba-403a-8581-d3e5017ece4d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-714452","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1d4512","namespace":"ai-tenant-e2e-shared-a-714452","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"006af1c0-44ba-403a-8581-d3e5017ece4d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"006af1c0-44ba-403a-8581-d3e5017ece4d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"006af1c0-44ba-403a-8581-d3e5017ece4d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"006af1c0-44ba-403a-8581-d3e5017ece4d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"006af1c0-44ba-403a-8581-d3e5017ece4d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-714452/rate-test-model-714452\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"006af1c0-44ba-403a-8581-d3e5017ece4d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"006af1c0-44ba-403a-8581-d3e5017ece4d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"006af1c0-44ba-403a-8581-d3e5017ece4d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1d4512"} {"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"006af1c0-44ba-403a-8581-d3e5017ece4d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d0b74bb0-8f30-4d41-a479-822df81f96db","keyName":"e2e-rate-a-1d4512","selected_subscription":"e2e-rate-iso-a-1d4512","selected_subscription_key":"ai-tenant-e2e-shared-a-714452/e2e-rate-iso-a-1d4512@ai-tenant-e2e-shared-a-714452/rate-test-model-714452","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-714452","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1d4512","namespace":"ai-tenant-e2e-shared-a-714452","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"006af1c0-44ba-403a-8581-d3e5017ece4d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"006af1c0-44ba-403a-8581-d3e5017ece4d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T17:51:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"526b4a30-0200-46d3-a4bc-9d474ac45257","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37798","PortSpecifier":{"PortValue":37798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"526b4a30-0200-46d3-a4bc-9d474ac45257","method":"POST","path":"/ai-tenant-e2e-shared-a-714452/rate-test-model-714452/v1/completions","host":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T17:51:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"526b4a30-0200-46d3-a4bc-9d474ac45257","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37798","PortSpecifier":{"PortValue":37798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965081,"nanos":361650894},"http":{"id":"526b4a30-0200-46d3-a4bc-9d474ac45257","method":"POST","headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-714452/rate-test-model-714452/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:51:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"526b4a30-0200-46d3-a4bc-9d474ac45257","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8re2IPsUSH3rl33S_UnHYL1Xi48KCdt4qVUO4NJoGT2BbbZF3lcQ26fdJ1GX"} {"level":"debug","ts":"2026-07-13T17:51:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"526b4a30-0200-46d3-a4bc-9d474ac45257","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8re2IPsUSH3rl33S_UnHYL1Xi48KCdt4qVUO4NJoGT2BbbZF3lcQ26fdJ1GX\"}"} {"level":"debug","ts":"2026-07-13T17:51:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"526b4a30-0200-46d3-a4bc-9d474ac45257","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d0b74bb0-8f30-4d41-a479-822df81f96db","keyName":"e2e-rate-a-1d4512","subscription":"e2e-rate-iso-a-1d4512","tenant":"e2e-shared-a-714452","userId":"d0b74bb0-8f30-4d41-a479-822df81f96db","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-13T17:51:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"526b4a30-0200-46d3-a4bc-9d474ac45257","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-714452/rate-test-model-714452\",\"requestedSubscription\":\"e2e-rate-iso-a-1d4512\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-13T17:51:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"526b4a30-0200-46d3-a4bc-9d474ac45257","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-714452","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1d4512","namespace":"ai-tenant-e2e-shared-a-714452","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-13T17:51:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"526b4a30-0200-46d3-a4bc-9d474ac45257","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:51:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"526b4a30-0200-46d3-a4bc-9d474ac45257","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:51:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"526b4a30-0200-46d3-a4bc-9d474ac45257","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:51:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"526b4a30-0200-46d3-a4bc-9d474ac45257","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-714452/rate-test-model-714452\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:51:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"526b4a30-0200-46d3-a4bc-9d474ac45257","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:51:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"526b4a30-0200-46d3-a4bc-9d474ac45257","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T17:51:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"526b4a30-0200-46d3-a4bc-9d474ac45257","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T17:51:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"526b4a30-0200-46d3-a4bc-9d474ac45257","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1d4512"} {"level":"debug","ts":"2026-07-13T17:51:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"526b4a30-0200-46d3-a4bc-9d474ac45257","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d0b74bb0-8f30-4d41-a479-822df81f96db","keyName":"e2e-rate-a-1d4512","selected_subscription":"e2e-rate-iso-a-1d4512","selected_subscription_key":"ai-tenant-e2e-shared-a-714452/e2e-rate-iso-a-1d4512@ai-tenant-e2e-shared-a-714452/rate-test-model-714452","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-714452","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1d4512","namespace":"ai-tenant-e2e-shared-a-714452","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-13T17:51:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"526b4a30-0200-46d3-a4bc-9d474ac45257","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T17:51:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"526b4a30-0200-46d3-a4bc-9d474ac45257","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T17:51:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d916900-60d2-4012-b815-0dc75812fecc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37800","PortSpecifier":{"PortValue":37800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d916900-60d2-4012-b815-0dc75812fecc","method":"POST","path":"/ai-tenant-e2e-shared-a-714452/rate-test-model-714452/v1/completions","host":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T17:51:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d916900-60d2-4012-b815-0dc75812fecc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37800","PortSpecifier":{"PortValue":37800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965082,"nanos":400493639},"http":{"id":"3d916900-60d2-4012-b815-0dc75812fecc","method":"POST","headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-714452/rate-test-model-714452/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:51:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d916900-60d2-4012-b815-0dc75812fecc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8re2IPsUSH3rl33S_UnHYL1Xi48KCdt4qVUO4NJoGT2BbbZF3lcQ26fdJ1GX"} {"level":"debug","ts":"2026-07-13T17:51:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3d916900-60d2-4012-b815-0dc75812fecc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8re2IPsUSH3rl33S_UnHYL1Xi48KCdt4qVUO4NJoGT2BbbZF3lcQ26fdJ1GX\"}"} {"level":"debug","ts":"2026-07-13T17:51:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3d916900-60d2-4012-b815-0dc75812fecc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d0b74bb0-8f30-4d41-a479-822df81f96db","keyName":"e2e-rate-a-1d4512","subscription":"e2e-rate-iso-a-1d4512","tenant":"e2e-shared-a-714452","userId":"d0b74bb0-8f30-4d41-a479-822df81f96db","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-13T17:51:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3d916900-60d2-4012-b815-0dc75812fecc","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-714452/rate-test-model-714452\",\"requestedSubscription\":\"e2e-rate-iso-a-1d4512\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-13T17:51:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3d916900-60d2-4012-b815-0dc75812fecc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-714452","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1d4512","namespace":"ai-tenant-e2e-shared-a-714452","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-13T17:51:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d916900-60d2-4012-b815-0dc75812fecc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:51:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d916900-60d2-4012-b815-0dc75812fecc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:51:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d916900-60d2-4012-b815-0dc75812fecc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:51:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d916900-60d2-4012-b815-0dc75812fecc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:51:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d916900-60d2-4012-b815-0dc75812fecc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-714452/rate-test-model-714452\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:51:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d916900-60d2-4012-b815-0dc75812fecc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1d4512"} {"level":"debug","ts":"2026-07-13T17:51:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d916900-60d2-4012-b815-0dc75812fecc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T17:51:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d916900-60d2-4012-b815-0dc75812fecc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T17:51:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d916900-60d2-4012-b815-0dc75812fecc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d0b74bb0-8f30-4d41-a479-822df81f96db","keyName":"e2e-rate-a-1d4512","selected_subscription":"e2e-rate-iso-a-1d4512","selected_subscription_key":"ai-tenant-e2e-shared-a-714452/e2e-rate-iso-a-1d4512@ai-tenant-e2e-shared-a-714452/rate-test-model-714452","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-714452","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1d4512","namespace":"ai-tenant-e2e-shared-a-714452","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-13T17:51:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d916900-60d2-4012-b815-0dc75812fecc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T17:51:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d916900-60d2-4012-b815-0dc75812fecc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"278806fc-ddba-486b-8a4f-c6d5a80a2d1a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55458","PortSpecifier":{"PortValue":55458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"278806fc-ddba-486b-8a4f-c6d5a80a2d1a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"278806fc-ddba-486b-8a4f-c6d5a80a2d1a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55458","PortSpecifier":{"PortValue":55458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965095,"nanos":319613159},"http":{"id":"278806fc-ddba-486b-8a4f-c6d5a80a2d1a","method":"POST","headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"278806fc-ddba-486b-8a4f-c6d5a80a2d1a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"278806fc-ddba-486b-8a4f-c6d5a80a2d1a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"54029952-54d8-40ca-af4e-07e776923192","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"]}} {"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"278806fc-ddba-486b-8a4f-c6d5a80a2d1a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"54029952-54d8-40ca-af4e-07e776923192","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ea3796478ce6525037cf89e51e1446d837346a52f5187a3739e2faa28c9c88fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"278806fc-ddba-486b-8a4f-c6d5a80a2d1a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"278806fc-ddba-486b-8a4f-c6d5a80a2d1a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"278806fc-ddba-486b-8a4f-c6d5a80a2d1a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-714452/rate-test-model-714452\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"278806fc-ddba-486b-8a4f-c6d5a80a2d1a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"278806fc-ddba-486b-8a4f-c6d5a80a2d1a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"278806fc-ddba-486b-8a4f-c6d5a80a2d1a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"278806fc-ddba-486b-8a4f-c6d5a80a2d1a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"278806fc-ddba-486b-8a4f-c6d5a80a2d1a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89cddb2b-4214-4a03-ba4e-e54587161a5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52272","PortSpecifier":{"PortValue":52272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"89cddb2b-4214-4a03-ba4e-e54587161a5b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89cddb2b-4214-4a03-ba4e-e54587161a5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52272","PortSpecifier":{"PortValue":52272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965095,"nanos":357473988},"http":{"id":"89cddb2b-4214-4a03-ba4e-e54587161a5b","method":"POST","headers":{":authority":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"89cddb2b-4214-4a03-ba4e-e54587161a5b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"89cddb2b-4214-4a03-ba4e-e54587161a5b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"54029952-54d8-40ca-af4e-07e776923192","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"]}} {"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"89cddb2b-4214-4a03-ba4e-e54587161a5b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"54029952-54d8-40ca-af4e-07e776923192","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89cddb2b-4214-4a03-ba4e-e54587161a5b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89cddb2b-4214-4a03-ba4e-e54587161a5b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89cddb2b-4214-4a03-ba4e-e54587161a5b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-31a784/rate-test-model-31a784\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"89cddb2b-4214-4a03-ba4e-e54587161a5b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89cddb2b-4214-4a03-ba4e-e54587161a5b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89cddb2b-4214-4a03-ba4e-e54587161a5b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89cddb2b-4214-4a03-ba4e-e54587161a5b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89cddb2b-4214-4a03-ba4e-e54587161a5b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0387f560-d503-47d6-acb6-f5ef1f1cc652","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55466","PortSpecifier":{"PortValue":55466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0387f560-d503-47d6-acb6-f5ef1f1cc652","method":"POST","path":"/ai-tenant-e2e-shared-a-714452/rate-test-model-714452/v1/completions","host":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0387f560-d503-47d6-acb6-f5ef1f1cc652","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55466","PortSpecifier":{"PortValue":55466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965095,"nanos":396838079},"http":{"id":"0387f560-d503-47d6-acb6-f5ef1f1cc652","method":"POST","headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-714452/rate-test-model-714452/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0387f560-d503-47d6-acb6-f5ef1f1cc652","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Bj8oea0U9sgX7maw_fQmAeMj0hT9G33fOGtSzeIRUPsUv0BSCFk0RgxAhfzz"} {"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0387f560-d503-47d6-acb6-f5ef1f1cc652","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Bj8oea0U9sgX7maw_fQmAeMj0hT9G33fOGtSzeIRUPsUv0BSCFk0RgxAhfzz\"}"} {"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0387f560-d503-47d6-acb6-f5ef1f1cc652","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"73d09a5b-fba8-4cca-af45-30eaf51026a4","keyName":"e2e-rate-a-e5e3cd","subscription":"e2e-rate-iso-a-e5e3cd","tenant":"e2e-shared-a-714452","userId":"73d09a5b-fba8-4cca-af45-30eaf51026a4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0387f560-d503-47d6-acb6-f5ef1f1cc652","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-714452/rate-test-model-714452\",\"requestedSubscription\":\"e2e-rate-iso-a-e5e3cd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0387f560-d503-47d6-acb6-f5ef1f1cc652","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-714452","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e5e3cd","namespace":"ai-tenant-e2e-shared-a-714452","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0387f560-d503-47d6-acb6-f5ef1f1cc652","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0387f560-d503-47d6-acb6-f5ef1f1cc652","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0387f560-d503-47d6-acb6-f5ef1f1cc652","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0387f560-d503-47d6-acb6-f5ef1f1cc652","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-714452/rate-test-model-714452\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0387f560-d503-47d6-acb6-f5ef1f1cc652","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0387f560-d503-47d6-acb6-f5ef1f1cc652","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0387f560-d503-47d6-acb6-f5ef1f1cc652","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e5e3cd"} {"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0387f560-d503-47d6-acb6-f5ef1f1cc652","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0387f560-d503-47d6-acb6-f5ef1f1cc652","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"73d09a5b-fba8-4cca-af45-30eaf51026a4","keyName":"e2e-rate-a-e5e3cd","selected_subscription":"e2e-rate-iso-a-e5e3cd","selected_subscription_key":"ai-tenant-e2e-shared-a-714452/e2e-rate-iso-a-e5e3cd@ai-tenant-e2e-shared-a-714452/rate-test-model-714452","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-714452","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e5e3cd","namespace":"ai-tenant-e2e-shared-a-714452","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0387f560-d503-47d6-acb6-f5ef1f1cc652","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0387f560-d503-47d6-acb6-f5ef1f1cc652","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T17:51:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"352d8a79-00e5-448b-b22d-28a22744ab82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55478","PortSpecifier":{"PortValue":55478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"352d8a79-00e5-448b-b22d-28a22744ab82","method":"POST","path":"/ai-tenant-e2e-shared-a-714452/rate-test-model-714452/v1/completions","host":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T17:51:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"352d8a79-00e5-448b-b22d-28a22744ab82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55478","PortSpecifier":{"PortValue":55478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965096,"nanos":436959269},"http":{"id":"352d8a79-00e5-448b-b22d-28a22744ab82","method":"POST","headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-714452/rate-test-model-714452/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:51:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"352d8a79-00e5-448b-b22d-28a22744ab82","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Bj8oea0U9sgX7maw_fQmAeMj0hT9G33fOGtSzeIRUPsUv0BSCFk0RgxAhfzz"} {"level":"debug","ts":"2026-07-13T17:51:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"352d8a79-00e5-448b-b22d-28a22744ab82","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Bj8oea0U9sgX7maw_fQmAeMj0hT9G33fOGtSzeIRUPsUv0BSCFk0RgxAhfzz\"}"} {"level":"debug","ts":"2026-07-13T17:51:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"352d8a79-00e5-448b-b22d-28a22744ab82","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"73d09a5b-fba8-4cca-af45-30eaf51026a4","keyName":"e2e-rate-a-e5e3cd","subscription":"e2e-rate-iso-a-e5e3cd","tenant":"e2e-shared-a-714452","userId":"73d09a5b-fba8-4cca-af45-30eaf51026a4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-13T17:51:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"352d8a79-00e5-448b-b22d-28a22744ab82","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-714452/rate-test-model-714452\",\"requestedSubscription\":\"e2e-rate-iso-a-e5e3cd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-13T17:51:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"352d8a79-00e5-448b-b22d-28a22744ab82","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-714452","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e5e3cd","namespace":"ai-tenant-e2e-shared-a-714452","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-13T17:51:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"352d8a79-00e5-448b-b22d-28a22744ab82","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:51:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"352d8a79-00e5-448b-b22d-28a22744ab82","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:51:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"352d8a79-00e5-448b-b22d-28a22744ab82","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:51:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"352d8a79-00e5-448b-b22d-28a22744ab82","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-714452/rate-test-model-714452\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:51:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"352d8a79-00e5-448b-b22d-28a22744ab82","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:51:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"352d8a79-00e5-448b-b22d-28a22744ab82","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T17:51:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"352d8a79-00e5-448b-b22d-28a22744ab82","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e5e3cd"} {"level":"debug","ts":"2026-07-13T17:51:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"352d8a79-00e5-448b-b22d-28a22744ab82","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T17:51:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"352d8a79-00e5-448b-b22d-28a22744ab82","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"73d09a5b-fba8-4cca-af45-30eaf51026a4","keyName":"e2e-rate-a-e5e3cd","selected_subscription":"e2e-rate-iso-a-e5e3cd","selected_subscription_key":"ai-tenant-e2e-shared-a-714452/e2e-rate-iso-a-e5e3cd@ai-tenant-e2e-shared-a-714452/rate-test-model-714452","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-714452","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e5e3cd","namespace":"ai-tenant-e2e-shared-a-714452","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-13T17:51:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"352d8a79-00e5-448b-b22d-28a22744ab82","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T17:51:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"352d8a79-00e5-448b-b22d-28a22744ab82","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a29ec33-5595-49fe-8372-6a070a19d25d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55488","PortSpecifier":{"PortValue":55488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6a29ec33-5595-49fe-8372-6a070a19d25d","method":"POST","path":"/ai-tenant-e2e-shared-a-714452/rate-test-model-714452/v1/completions","host":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a29ec33-5595-49fe-8372-6a070a19d25d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55488","PortSpecifier":{"PortValue":55488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965097,"nanos":469713920},"http":{"id":"6a29ec33-5595-49fe-8372-6a070a19d25d","method":"POST","headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-714452/rate-test-model-714452/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6a29ec33-5595-49fe-8372-6a070a19d25d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Bj8oea0U9sgX7maw_fQmAeMj0hT9G33fOGtSzeIRUPsUv0BSCFk0RgxAhfzz"} {"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a29ec33-5595-49fe-8372-6a070a19d25d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Bj8oea0U9sgX7maw_fQmAeMj0hT9G33fOGtSzeIRUPsUv0BSCFk0RgxAhfzz\"}"} {"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a29ec33-5595-49fe-8372-6a070a19d25d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"73d09a5b-fba8-4cca-af45-30eaf51026a4","keyName":"e2e-rate-a-e5e3cd","subscription":"e2e-rate-iso-a-e5e3cd","tenant":"e2e-shared-a-714452","userId":"73d09a5b-fba8-4cca-af45-30eaf51026a4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a29ec33-5595-49fe-8372-6a070a19d25d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-714452/rate-test-model-714452\",\"requestedSubscription\":\"e2e-rate-iso-a-e5e3cd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a29ec33-5595-49fe-8372-6a070a19d25d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-714452","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e5e3cd","namespace":"ai-tenant-e2e-shared-a-714452","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6a29ec33-5595-49fe-8372-6a070a19d25d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a29ec33-5595-49fe-8372-6a070a19d25d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a29ec33-5595-49fe-8372-6a070a19d25d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a29ec33-5595-49fe-8372-6a070a19d25d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-714452/rate-test-model-714452\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a29ec33-5595-49fe-8372-6a070a19d25d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a29ec33-5595-49fe-8372-6a070a19d25d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e5e3cd"} {"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a29ec33-5595-49fe-8372-6a070a19d25d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a29ec33-5595-49fe-8372-6a070a19d25d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a29ec33-5595-49fe-8372-6a070a19d25d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"73d09a5b-fba8-4cca-af45-30eaf51026a4","keyName":"e2e-rate-a-e5e3cd","selected_subscription":"e2e-rate-iso-a-e5e3cd","selected_subscription_key":"ai-tenant-e2e-shared-a-714452/e2e-rate-iso-a-e5e3cd@ai-tenant-e2e-shared-a-714452/rate-test-model-714452","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-714452","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e5e3cd","namespace":"ai-tenant-e2e-shared-a-714452","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a29ec33-5595-49fe-8372-6a070a19d25d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a29ec33-5595-49fe-8372-6a070a19d25d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8781d668-fd6d-4c43-a381-764142b925b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52282","PortSpecifier":{"PortValue":52282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8781d668-fd6d-4c43-a381-764142b925b4","method":"POST","path":"/ai-tenant-e2e-shared-b-31a784/rate-test-model-31a784/v1/completions","host":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8781d668-fd6d-4c43-a381-764142b925b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52282","PortSpecifier":{"PortValue":52282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965097,"nanos":503271348},"http":{"id":"8781d668-fd6d-4c43-a381-764142b925b4","method":"POST","headers":{":authority":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-31a784/rate-test-model-31a784/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8781d668-fd6d-4c43-a381-764142b925b4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XvWs5S5VfTncuPgv_sYFMu2WuzIBNpdNsto9lwDV6uidLWzKqjjsVx8DDKYT"} {"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8781d668-fd6d-4c43-a381-764142b925b4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-31a784.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XvWs5S5VfTncuPgv_sYFMu2WuzIBNpdNsto9lwDV6uidLWzKqjjsVx8DDKYT\"}"} {"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8781d668-fd6d-4c43-a381-764142b925b4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-31a784.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0819bf45-b998-4342-8c0a-03022460ddcc","keyName":"e2e-rate-b-e5e3cd","subscription":"e2e-rate-iso-b-e5e3cd","tenant":"e2e-shared-b-31a784","userId":"0819bf45-b998-4342-8c0a-03022460ddcc","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8781d668-fd6d-4c43-a381-764142b925b4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-31a784.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-31a784/rate-test-model-31a784\",\"requestedSubscription\":\"e2e-rate-iso-b-e5e3cd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8781d668-fd6d-4c43-a381-764142b925b4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-31a784.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-31a784","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-e5e3cd","namespace":"ai-tenant-e2e-shared-b-31a784","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8781d668-fd6d-4c43-a381-764142b925b4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8781d668-fd6d-4c43-a381-764142b925b4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8781d668-fd6d-4c43-a381-764142b925b4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8781d668-fd6d-4c43-a381-764142b925b4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-31a784/rate-test-model-31a784\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8781d668-fd6d-4c43-a381-764142b925b4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8781d668-fd6d-4c43-a381-764142b925b4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8781d668-fd6d-4c43-a381-764142b925b4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8781d668-fd6d-4c43-a381-764142b925b4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-e5e3cd"} {"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8781d668-fd6d-4c43-a381-764142b925b4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0819bf45-b998-4342-8c0a-03022460ddcc","keyName":"e2e-rate-b-e5e3cd","selected_subscription":"e2e-rate-iso-b-e5e3cd","selected_subscription_key":"ai-tenant-e2e-shared-b-31a784/e2e-rate-iso-b-e5e3cd@ai-tenant-e2e-shared-b-31a784/rate-test-model-31a784","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-31a784","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-e5e3cd","namespace":"ai-tenant-e2e-shared-b-31a784","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8781d668-fd6d-4c43-a381-764142b925b4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8781d668-fd6d-4c43-a381-764142b925b4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T17:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8"} {"level":"info","ts":"2026-07-13T17:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b7f64a9774c859c6b8b21b204d0dba501a97fffb22011ab39221b4c81001eb76"} {"level":"info","ts":"2026-07-13T17:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17"} {"level":"info","ts":"2026-07-13T17:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d"} {"level":"info","ts":"2026-07-13T17:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a"} {"level":"info","ts":"2026-07-13T17:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2bc6ab7d0cd64c0e3c3f2afdf989e565315302af645696406b707f4efe1339ea"} {"level":"info","ts":"2026-07-13T17:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2"} {"level":"info","ts":"2026-07-13T17:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1e90f327113f8ea9729b952af5212681a9b9b0d835f1bb7ea48d8c3d1c4822d"} {"level":"info","ts":"2026-07-13T17:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/013e9617076d91feb79f72ba4a51cac5a7db09148cc010610a8805a36a8d7f12"} {"level":"info","ts":"2026-07-13T17:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32"} {"level":"info","ts":"2026-07-13T17:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5cab41fb65368e83144431559521eb60275cfe276e44fa136c1b7ee4875ed11b"} {"level":"info","ts":"2026-07-13T17:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/faf7129059723e943863cb6c718ef27fc5bb0fd65a11239ca0d0957768d5cfa1"} {"level":"info","ts":"2026-07-13T17:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bdf6282e689381510a332d84bdbb41a62fef4547c0feb132443c953f523a3726"} {"level":"info","ts":"2026-07-13T17:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918"} {"level":"info","ts":"2026-07-13T17:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3a0b773fb14df6332b1c67115e7313bb01599924c6c22e0846ae9e047aa107d"} {"level":"info","ts":"2026-07-13T17:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1790964f2c00436fbe6c3120f3e783a20e3125b0a5c60aeaa059c2fd0d968ee5"} {"level":"info","ts":"2026-07-13T17:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/735ea9d9da5b600a444ac0473a1a316e010212cfc3582cfcc9d3aba6d24489ef"} {"level":"info","ts":"2026-07-13T17:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58ca2240da2914b5b052039d6ac9676215337b0a1d85cec1662f5ea768a346e1"} {"level":"info","ts":"2026-07-13T17:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c"} {"level":"info","ts":"2026-07-13T17:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea3796478ce6525037cf89e51e1446d837346a52f5187a3739e2faa28c9c88fd"} {"level":"info","ts":"2026-07-13T17:52:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff37f9695f9e9aedc658e8b13d31b46d8091f39683070f68ad2b6168c802fc28"} {"level":"info","ts":"2026-07-13T17:52:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5"} {"level":"info","ts":"2026-07-13T17:52:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a0956c602d3f4e09c2f3ff0807cd4d73d54d3191490f40493339d378d852efe"} {"level":"info","ts":"2026-07-13T17:52:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443"}