--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-23T18:57:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0629e8e4-5882-45c0-8b44-b67cd97abc81","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:57:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0629e8e4-5882-45c0-8b44-b67cd97abc81","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T18:57:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0629e8e4-5882-45c0-8b44-b67cd97abc81","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:57:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0629e8e4-5882-45c0-8b44-b67cd97abc81","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:57:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67a2040e-f64f-4c96-9b1d-7a14322f89ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:45208","PortSpecifier":{"PortValue":45208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"67a2040e-f64f-4c96-9b1d-7a14322f89ea","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-60de5a.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:57:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67a2040e-f64f-4c96-9b1d-7a14322f89ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:45208","PortSpecifier":{"PortValue":45208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784833063,"nanos":898739754},"http":{"id":"67a2040e-f64f-4c96-9b1d-7a14322f89ea","method":"POST","headers":{":authority":"e2e-shared-b-60de5a.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:57:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"67a2040e-f64f-4c96-9b1d-7a14322f89ea","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:57:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"67a2040e-f64f-4c96-9b1d-7a14322f89ea","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbcb4750-d409-4f27-b34b-22cf6c2c21ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ea996b7d-8676-4409-a79d-af2a84ac29b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ae2263ba428"]}} {"level":"debug","ts":"2026-07-23T18:57:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"67a2040e-f64f-4c96-9b1d-7a14322f89ea","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ae2263ba428"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ea996b7d-8676-4409-a79d-af2a84ac29b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbcb4750-d409-4f27-b34b-22cf6c2c21ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-60de5a.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:57:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67a2040e-f64f-4c96-9b1d-7a14322f89ea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:57:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67a2040e-f64f-4c96-9b1d-7a14322f89ea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:57:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67a2040e-f64f-4c96-9b1d-7a14322f89ea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-60de5a/auth-test-model-60de5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-60de5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:57:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"67a2040e-f64f-4c96-9b1d-7a14322f89ea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:57:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67a2040e-f64f-4c96-9b1d-7a14322f89ea","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:57:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67a2040e-f64f-4c96-9b1d-7a14322f89ea","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T18:57:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67a2040e-f64f-4c96-9b1d-7a14322f89ea","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:57:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67a2040e-f64f-4c96-9b1d-7a14322f89ea","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:57:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5df5347-9274-4e3d-b535-e2637837ec45","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:40168","PortSpecifier":{"PortValue":40168}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c5df5347-9274-4e3d-b535-e2637837ec45","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:57:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5df5347-9274-4e3d-b535-e2637837ec45","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:40168","PortSpecifier":{"PortValue":40168}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784833063,"nanos":938075698},"http":{"id":"c5df5347-9274-4e3d-b535-e2637837ec45","method":"GET","headers":{":authority":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:57:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c5df5347-9274-4e3d-b535-e2637837ec45","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1e1m3absmbBazmY2p_2H2O1JML02SHEBT4dB4NXNbovEvv520ctdzhy1DVUrf"} {"level":"debug","ts":"2026-07-23T18:57:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c5df5347-9274-4e3d-b535-e2637837ec45","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3f12e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1e1m3absmbBazmY2p_2H2O1JML02SHEBT4dB4NXNbovEvv520ctdzhy1DVUrf\"}"} {"level":"debug","ts":"2026-07-23T18:57:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c5df5347-9274-4e3d-b535-e2637837ec45","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3f12e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c1a5263f-0255-46e0-98ec-a2232f826c49","keyName":"e2e-auth-iso-a-d33dc2","subscription":"e2e-auth-iso-3dc32b","tenant":"e2e-shared-a-3f12e9","userId":"c1a5263f-0255-46e0-98ec-a2232f826c49","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T18:57:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c5df5347-9274-4e3d-b535-e2637837ec45","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:57:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5df5347-9274-4e3d-b535-e2637837ec45","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:57:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5df5347-9274-4e3d-b535-e2637837ec45","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:57:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5df5347-9274-4e3d-b535-e2637837ec45","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3f12e9/auth-test-model-3f12e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3f12e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:57:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5df5347-9274-4e3d-b535-e2637837ec45","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:57:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5df5347-9274-4e3d-b535-e2637837ec45","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:57:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5df5347-9274-4e3d-b535-e2637837ec45","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-3dc32b"} {"level":"debug","ts":"2026-07-23T18:57:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c5df5347-9274-4e3d-b535-e2637837ec45","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-23T18:57:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5df5347-9274-4e3d-b535-e2637837ec45","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:57:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5df5347-9274-4e3d-b535-e2637837ec45","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"} {"level":"info","ts":"2026-07-23T18:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81"} {"level":"info","ts":"2026-07-23T18:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e"} {"level":"info","ts":"2026-07-23T18:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e"} {"level":"info","ts":"2026-07-23T18:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3"} {"level":"info","ts":"2026-07-23T18:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f"} {"level":"info","ts":"2026-07-23T18:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00"} {"level":"info","ts":"2026-07-23T18:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073"} {"level":"info","ts":"2026-07-23T18:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"} {"level":"info","ts":"2026-07-23T18:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4"} {"level":"info","ts":"2026-07-23T18:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f"} {"level":"info","ts":"2026-07-23T18:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd"} {"level":"debug","ts":"2026-07-23T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:57:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd"} {"level":"debug","ts":"2026-07-23T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd"} {"level":"debug","ts":"2026-07-23T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:57:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:57:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd"} {"level":"debug","ts":"2026-07-23T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:57:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81"} {"level":"info","ts":"2026-07-23T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81"} {"level":"debug","ts":"2026-07-23T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:57:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:57:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:57:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81"} {"level":"debug","ts":"2026-07-23T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81"} {"level":"debug","ts":"2026-07-23T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:57:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:57:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:57:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:57:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81"} {"level":"info","ts":"2026-07-23T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:57:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:57:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:57:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f"} {"level":"info","ts":"2026-07-23T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:57:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81"} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f"} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81"} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81"} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f"} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81"} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073"} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073"} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073"} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e"} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e"} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e"} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e"} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e"} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e"} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e"} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e"} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e"} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3"} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3"} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e"} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f"} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4"} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f"} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4"} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f"} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3"} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4"} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:57:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00"} {"level":"info","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:57:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:57:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:57:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:57:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"} {"level":"info","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:57:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:57:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00"} {"level":"info","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:57:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:57:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"} {"level":"info","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:57:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:57:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00"} {"level":"info","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:57:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:57:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:57:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:57:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"} {"level":"error","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"} {"level":"debug","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:57:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:57:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:57:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:57:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"} {"level":"debug","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"} {"level":"debug","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:57:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:57:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:57:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:57:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"} {"level":"debug","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"} {"level":"debug","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:57:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:57:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"} {"level":"info","ts":"2026-07-23T18:58:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e76ba8bb-e561-4b07-a443-24ea5302a86d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:48046","PortSpecifier":{"PortValue":48046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e76ba8bb-e561-4b07-a443-24ea5302a86d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:58:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e76ba8bb-e561-4b07-a443-24ea5302a86d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:48046","PortSpecifier":{"PortValue":48046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784833081,"nanos":999653443},"http":{"id":"e76ba8bb-e561-4b07-a443-24ea5302a86d","method":"POST","headers":{":authority":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:58:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e76ba8bb-e561-4b07-a443-24ea5302a86d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:58:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e76ba8bb-e561-4b07-a443-24ea5302a86d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbcb4750-d409-4f27-b34b-22cf6c2c21ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ea996b7d-8676-4409-a79d-af2a84ac29b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ae2263ba428"]}} {"level":"debug","ts":"2026-07-23T18:58:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e76ba8bb-e561-4b07-a443-24ea5302a86d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ae2263ba428"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ea996b7d-8676-4409-a79d-af2a84ac29b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbcb4750-d409-4f27-b34b-22cf6c2c21ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b8a3b735f58ac4e1dd9a9be2925a32de51a9f059d1931a7319e66f89952a8c7a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:58:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e76ba8bb-e561-4b07-a443-24ea5302a86d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:58:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e76ba8bb-e561-4b07-a443-24ea5302a86d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:58:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e76ba8bb-e561-4b07-a443-24ea5302a86d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3f12e9/auth-test-model-3f12e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3f12e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:58:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e76ba8bb-e561-4b07-a443-24ea5302a86d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:58:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e76ba8bb-e561-4b07-a443-24ea5302a86d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:58:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e76ba8bb-e561-4b07-a443-24ea5302a86d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T18:58:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e76ba8bb-e561-4b07-a443-24ea5302a86d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:58:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e76ba8bb-e561-4b07-a443-24ea5302a86d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:58:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e89ef47-684f-4f4c-8fc6-ce9fd163a130","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:43726","PortSpecifier":{"PortValue":43726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7e89ef47-684f-4f4c-8fc6-ce9fd163a130","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-60de5a.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:58:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e89ef47-684f-4f4c-8fc6-ce9fd163a130","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:43726","PortSpecifier":{"PortValue":43726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784833082,"nanos":35527503},"http":{"id":"7e89ef47-684f-4f4c-8fc6-ce9fd163a130","method":"POST","headers":{":authority":"e2e-shared-b-60de5a.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:58:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7e89ef47-684f-4f4c-8fc6-ce9fd163a130","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:58:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7e89ef47-684f-4f4c-8fc6-ce9fd163a130","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbcb4750-d409-4f27-b34b-22cf6c2c21ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ea996b7d-8676-4409-a79d-af2a84ac29b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ae2263ba428"]}} {"level":"debug","ts":"2026-07-23T18:58:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7e89ef47-684f-4f4c-8fc6-ce9fd163a130","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ae2263ba428"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ea996b7d-8676-4409-a79d-af2a84ac29b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbcb4750-d409-4f27-b34b-22cf6c2c21ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-60de5a.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:58:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e89ef47-684f-4f4c-8fc6-ce9fd163a130","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:58:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e89ef47-684f-4f4c-8fc6-ce9fd163a130","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:58:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e89ef47-684f-4f4c-8fc6-ce9fd163a130","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-60de5a/auth-test-model-60de5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-60de5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:58:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7e89ef47-684f-4f4c-8fc6-ce9fd163a130","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:58:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e89ef47-684f-4f4c-8fc6-ce9fd163a130","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:58:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e89ef47-684f-4f4c-8fc6-ce9fd163a130","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T18:58:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e89ef47-684f-4f4c-8fc6-ce9fd163a130","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:58:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e89ef47-684f-4f4c-8fc6-ce9fd163a130","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:58:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e946e8e8-4878-4bfa-aef7-2d0b3cc64358","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:43742","PortSpecifier":{"PortValue":43742}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e946e8e8-4878-4bfa-aef7-2d0b3cc64358","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-60de5a.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:58:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e946e8e8-4878-4bfa-aef7-2d0b3cc64358","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:43742","PortSpecifier":{"PortValue":43742}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784833082,"nanos":77069922},"http":{"id":"e946e8e8-4878-4bfa-aef7-2d0b3cc64358","method":"GET","headers":{":authority":"e2e-shared-b-60de5a.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:58:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e946e8e8-4878-4bfa-aef7-2d0b3cc64358","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PRZEIhO8j9FgDv4y_C8VsUizHVwYpG4hlu53TjxieOW1s4r7SsFBt5pkqYNI"} {"level":"debug","ts":"2026-07-23T18:58:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e946e8e8-4878-4bfa-aef7-2d0b3cc64358","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-60de5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PRZEIhO8j9FgDv4y_C8VsUizHVwYpG4hlu53TjxieOW1s4r7SsFBt5pkqYNI\"}"} {"level":"debug","ts":"2026-07-23T18:58:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e946e8e8-4878-4bfa-aef7-2d0b3cc64358","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-60de5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-23T18:58:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e946e8e8-4878-4bfa-aef7-2d0b3cc64358","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-60de5a.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:58:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e946e8e8-4878-4bfa-aef7-2d0b3cc64358","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:58:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"e946e8e8-4878-4bfa-aef7-2d0b3cc64358","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-23T18:58:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e946e8e8-4878-4bfa-aef7-2d0b3cc64358","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-23T18:58:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e946e8e8-4878-4bfa-aef7-2d0b3cc64358","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}} {"level":"info","ts":"2026-07-23T18:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd"} {"level":"info","ts":"2026-07-23T18:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e"} {"level":"info","ts":"2026-07-23T18:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"} {"level":"info","ts":"2026-07-23T18:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00"} {"level":"info","ts":"2026-07-23T18:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f"} {"level":"info","ts":"2026-07-23T18:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3"} {"level":"info","ts":"2026-07-23T18:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"} {"level":"info","ts":"2026-07-23T18:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4"} {"level":"info","ts":"2026-07-23T18:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f"} {"level":"info","ts":"2026-07-23T18:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073"} {"level":"info","ts":"2026-07-23T18:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e"} {"level":"info","ts":"2026-07-23T18:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81"} {"level":"debug","ts":"2026-07-23T18:58:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"} {"level":"info","ts":"2026-07-23T18:58:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:58:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"} {"level":"debug","ts":"2026-07-23T18:58:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"} {"level":"info","ts":"2026-07-23T18:58:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:58:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"} {"level":"debug","ts":"2026-07-23T18:58:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:58:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"} {"level":"debug","ts":"2026-07-23T18:58:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:58:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e"} {"level":"debug","ts":"2026-07-23T18:58:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:58:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e"} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e"} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e"} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd"} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e"} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e"} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd"} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e"} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e"} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e"} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e"} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e"} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e"} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00"} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e"} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e"} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00"} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e"} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e"} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f"} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3"} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f"} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3"} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f"} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4"} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3"} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81"} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073"} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f"} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4"} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f"} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81"} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f"} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073"} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f"} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:58:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f"} {"level":"info","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bbc46c07-07ef-492b-b0ec-e4a7e0c0fec7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:35896","PortSpecifier":{"PortValue":35896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bbc46c07-07ef-492b-b0ec-e4a7e0c0fec7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bbc46c07-07ef-492b-b0ec-e4a7e0c0fec7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:35896","PortSpecifier":{"PortValue":35896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784833101,"nanos":382105139},"http":{"id":"bbc46c07-07ef-492b-b0ec-e4a7e0c0fec7","method":"POST","headers":{":authority":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bbc46c07-07ef-492b-b0ec-e4a7e0c0fec7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bbc46c07-07ef-492b-b0ec-e4a7e0c0fec7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbcb4750-d409-4f27-b34b-22cf6c2c21ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ea996b7d-8676-4409-a79d-af2a84ac29b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ae2263ba428"]}} {"level":"debug","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bbc46c07-07ef-492b-b0ec-e4a7e0c0fec7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ae2263ba428"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ea996b7d-8676-4409-a79d-af2a84ac29b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbcb4750-d409-4f27-b34b-22cf6c2c21ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b8a3b735f58ac4e1dd9a9be2925a32de51a9f059d1931a7319e66f89952a8c7a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbc46c07-07ef-492b-b0ec-e4a7e0c0fec7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbc46c07-07ef-492b-b0ec-e4a7e0c0fec7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbc46c07-07ef-492b-b0ec-e4a7e0c0fec7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3f12e9/auth-test-model-3f12e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3f12e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bbc46c07-07ef-492b-b0ec-e4a7e0c0fec7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bbc46c07-07ef-492b-b0ec-e4a7e0c0fec7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bbc46c07-07ef-492b-b0ec-e4a7e0c0fec7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bbc46c07-07ef-492b-b0ec-e4a7e0c0fec7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bbc46c07-07ef-492b-b0ec-e4a7e0c0fec7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65f6c3c1-f64e-48d3-9697-e8edadb1c506","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:33422","PortSpecifier":{"PortValue":33422}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"65f6c3c1-f64e-48d3-9697-e8edadb1c506","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-60de5a.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65f6c3c1-f64e-48d3-9697-e8edadb1c506","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:33422","PortSpecifier":{"PortValue":33422}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784833101,"nanos":414014726},"http":{"id":"65f6c3c1-f64e-48d3-9697-e8edadb1c506","method":"POST","headers":{":authority":"e2e-shared-b-60de5a.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"65f6c3c1-f64e-48d3-9697-e8edadb1c506","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"65f6c3c1-f64e-48d3-9697-e8edadb1c506","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbcb4750-d409-4f27-b34b-22cf6c2c21ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ea996b7d-8676-4409-a79d-af2a84ac29b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ae2263ba428"]}} {"level":"debug","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"65f6c3c1-f64e-48d3-9697-e8edadb1c506","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ae2263ba428"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ea996b7d-8676-4409-a79d-af2a84ac29b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbcb4750-d409-4f27-b34b-22cf6c2c21ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-60de5a.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65f6c3c1-f64e-48d3-9697-e8edadb1c506","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65f6c3c1-f64e-48d3-9697-e8edadb1c506","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65f6c3c1-f64e-48d3-9697-e8edadb1c506","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-60de5a/auth-test-model-60de5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-60de5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"65f6c3c1-f64e-48d3-9697-e8edadb1c506","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65f6c3c1-f64e-48d3-9697-e8edadb1c506","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65f6c3c1-f64e-48d3-9697-e8edadb1c506","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65f6c3c1-f64e-48d3-9697-e8edadb1c506","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65f6c3c1-f64e-48d3-9697-e8edadb1c506","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7fe13d3e-eba6-4664-9f8f-2bed5cbb7bf5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:35900","PortSpecifier":{"PortValue":35900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7fe13d3e-eba6-4664-9f8f-2bed5cbb7bf5","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7fe13d3e-eba6-4664-9f8f-2bed5cbb7bf5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:35900","PortSpecifier":{"PortValue":35900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784833101,"nanos":451885338},"http":{"id":"7fe13d3e-eba6-4664-9f8f-2bed5cbb7bf5","method":"POST","headers":{":authority":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7fe13d3e-eba6-4664-9f8f-2bed5cbb7bf5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7fe13d3e-eba6-4664-9f8f-2bed5cbb7bf5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbcb4750-d409-4f27-b34b-22cf6c2c21ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ea996b7d-8676-4409-a79d-af2a84ac29b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ae2263ba428"]}} {"level":"debug","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7fe13d3e-eba6-4664-9f8f-2bed5cbb7bf5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ae2263ba428"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ea996b7d-8676-4409-a79d-af2a84ac29b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbcb4750-d409-4f27-b34b-22cf6c2c21ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b8a3b735f58ac4e1dd9a9be2925a32de51a9f059d1931a7319e66f89952a8c7a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fe13d3e-eba6-4664-9f8f-2bed5cbb7bf5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fe13d3e-eba6-4664-9f8f-2bed5cbb7bf5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fe13d3e-eba6-4664-9f8f-2bed5cbb7bf5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3f12e9/auth-test-model-3f12e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3f12e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7fe13d3e-eba6-4664-9f8f-2bed5cbb7bf5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fe13d3e-eba6-4664-9f8f-2bed5cbb7bf5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fe13d3e-eba6-4664-9f8f-2bed5cbb7bf5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7fe13d3e-eba6-4664-9f8f-2bed5cbb7bf5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7fe13d3e-eba6-4664-9f8f-2bed5cbb7bf5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"618c4078-daae-474d-9f1b-38a875fbf461","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:33424","PortSpecifier":{"PortValue":33424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"618c4078-daae-474d-9f1b-38a875fbf461","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-60de5a.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"618c4078-daae-474d-9f1b-38a875fbf461","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:33424","PortSpecifier":{"PortValue":33424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784833101,"nanos":489862547},"http":{"id":"618c4078-daae-474d-9f1b-38a875fbf461","method":"POST","headers":{":authority":"e2e-shared-b-60de5a.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"618c4078-daae-474d-9f1b-38a875fbf461","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"618c4078-daae-474d-9f1b-38a875fbf461","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbcb4750-d409-4f27-b34b-22cf6c2c21ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ea996b7d-8676-4409-a79d-af2a84ac29b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ae2263ba428"]}} {"level":"debug","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"618c4078-daae-474d-9f1b-38a875fbf461","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ae2263ba428"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ea996b7d-8676-4409-a79d-af2a84ac29b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbcb4750-d409-4f27-b34b-22cf6c2c21ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-60de5a.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"618c4078-daae-474d-9f1b-38a875fbf461","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"618c4078-daae-474d-9f1b-38a875fbf461","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"618c4078-daae-474d-9f1b-38a875fbf461","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-60de5a/auth-test-model-60de5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-60de5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"618c4078-daae-474d-9f1b-38a875fbf461","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"618c4078-daae-474d-9f1b-38a875fbf461","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"618c4078-daae-474d-9f1b-38a875fbf461","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"618c4078-daae-474d-9f1b-38a875fbf461","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:58:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"618c4078-daae-474d-9f1b-38a875fbf461","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e"} {"level":"info","ts":"2026-07-23T18:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"} {"level":"info","ts":"2026-07-23T18:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4"} {"level":"info","ts":"2026-07-23T18:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00"} {"level":"info","ts":"2026-07-23T18:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f"} {"level":"info","ts":"2026-07-23T18:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"} {"level":"info","ts":"2026-07-23T18:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073"} {"level":"info","ts":"2026-07-23T18:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3"} {"level":"info","ts":"2026-07-23T18:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e"} {"level":"info","ts":"2026-07-23T18:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81"} {"level":"info","ts":"2026-07-23T18:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd"} {"level":"info","ts":"2026-07-23T18:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f"} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e"} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e"} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e"} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e"} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e"} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e"} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e"} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00"} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00"} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00"} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3"} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3"} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00"} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3"} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3"} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3"} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3"} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3"} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3"} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"} {"level":"error","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3"} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3"} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073"} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3"} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073"} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4"} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd"} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4"} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81"} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e"} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd"} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f"} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81"} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e"} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f"} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f"} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81"} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f"} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f"} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81"} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f"} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f"} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:58:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f"} {"level":"info","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0ddbf1c-4fa6-4231-a358-cb25fb3e5e68","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:41594","PortSpecifier":{"PortValue":41594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f0ddbf1c-4fa6-4231-a358-cb25fb3e5e68","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0ddbf1c-4fa6-4231-a358-cb25fb3e5e68","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:41594","PortSpecifier":{"PortValue":41594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784833118,"nanos":640003966},"http":{"id":"f0ddbf1c-4fa6-4231-a358-cb25fb3e5e68","method":"POST","headers":{":authority":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f0ddbf1c-4fa6-4231-a358-cb25fb3e5e68","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f0ddbf1c-4fa6-4231-a358-cb25fb3e5e68","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbcb4750-d409-4f27-b34b-22cf6c2c21ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ea996b7d-8676-4409-a79d-af2a84ac29b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ae2263ba428"]}} {"level":"debug","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f0ddbf1c-4fa6-4231-a358-cb25fb3e5e68","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ae2263ba428"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ea996b7d-8676-4409-a79d-af2a84ac29b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbcb4750-d409-4f27-b34b-22cf6c2c21ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b8a3b735f58ac4e1dd9a9be2925a32de51a9f059d1931a7319e66f89952a8c7a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0ddbf1c-4fa6-4231-a358-cb25fb3e5e68","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0ddbf1c-4fa6-4231-a358-cb25fb3e5e68","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0ddbf1c-4fa6-4231-a358-cb25fb3e5e68","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3f12e9/auth-test-model-3f12e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3f12e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f0ddbf1c-4fa6-4231-a358-cb25fb3e5e68","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0ddbf1c-4fa6-4231-a358-cb25fb3e5e68","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0ddbf1c-4fa6-4231-a358-cb25fb3e5e68","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0ddbf1c-4fa6-4231-a358-cb25fb3e5e68","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0ddbf1c-4fa6-4231-a358-cb25fb3e5e68","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd799fca-63b0-4d6b-aa09-85416511aa04","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:39386","PortSpecifier":{"PortValue":39386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fd799fca-63b0-4d6b-aa09-85416511aa04","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-60de5a.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd799fca-63b0-4d6b-aa09-85416511aa04","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:39386","PortSpecifier":{"PortValue":39386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784833118,"nanos":673278044},"http":{"id":"fd799fca-63b0-4d6b-aa09-85416511aa04","method":"POST","headers":{":authority":"e2e-shared-b-60de5a.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fd799fca-63b0-4d6b-aa09-85416511aa04","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fd799fca-63b0-4d6b-aa09-85416511aa04","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbcb4750-d409-4f27-b34b-22cf6c2c21ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ea996b7d-8676-4409-a79d-af2a84ac29b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ae2263ba428"]}} {"level":"debug","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fd799fca-63b0-4d6b-aa09-85416511aa04","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ae2263ba428"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ea996b7d-8676-4409-a79d-af2a84ac29b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbcb4750-d409-4f27-b34b-22cf6c2c21ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-60de5a.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd799fca-63b0-4d6b-aa09-85416511aa04","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd799fca-63b0-4d6b-aa09-85416511aa04","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd799fca-63b0-4d6b-aa09-85416511aa04","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-60de5a/auth-test-model-60de5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-60de5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fd799fca-63b0-4d6b-aa09-85416511aa04","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd799fca-63b0-4d6b-aa09-85416511aa04","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd799fca-63b0-4d6b-aa09-85416511aa04","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd799fca-63b0-4d6b-aa09-85416511aa04","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd799fca-63b0-4d6b-aa09-85416511aa04","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d95a38b0-df29-4878-8ecd-d0c0ceafe086","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:39396","PortSpecifier":{"PortValue":39396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d95a38b0-df29-4878-8ecd-d0c0ceafe086","method":"GET","path":"/maas-api/v1/api-keys/9b99e867-8c1b-4e02-a55b-5e4335d346b9","host":"e2e-shared-b-60de5a.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d95a38b0-df29-4878-8ecd-d0c0ceafe086","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:39396","PortSpecifier":{"PortValue":39396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784833118,"nanos":710364399},"http":{"id":"d95a38b0-df29-4878-8ecd-d0c0ceafe086","method":"GET","headers":{":authority":"e2e-shared-b-60de5a.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9b99e867-8c1b-4e02-a55b-5e4335d346b9",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d95a38b0-df29-4878-8ecd-d0c0ceafe086","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d95a38b0-df29-4878-8ecd-d0c0ceafe086","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbcb4750-d409-4f27-b34b-22cf6c2c21ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ea996b7d-8676-4409-a79d-af2a84ac29b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ae2263ba428"]}} {"level":"debug","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d95a38b0-df29-4878-8ecd-d0c0ceafe086","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ae2263ba428"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ea996b7d-8676-4409-a79d-af2a84ac29b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbcb4750-d409-4f27-b34b-22cf6c2c21ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-60de5a.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9b99e867-8c1b-4e02-a55b-5e4335d346b9",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d95a38b0-df29-4878-8ecd-d0c0ceafe086","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d95a38b0-df29-4878-8ecd-d0c0ceafe086","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d95a38b0-df29-4878-8ecd-d0c0ceafe086","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-60de5a/auth-test-model-60de5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-60de5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d95a38b0-df29-4878-8ecd-d0c0ceafe086","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d95a38b0-df29-4878-8ecd-d0c0ceafe086","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d95a38b0-df29-4878-8ecd-d0c0ceafe086","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d95a38b0-df29-4878-8ecd-d0c0ceafe086","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d95a38b0-df29-4878-8ecd-d0c0ceafe086","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e107b4fd-64fc-4f8f-a3d2-388ecb9cd8bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:41608","PortSpecifier":{"PortValue":41608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e107b4fd-64fc-4f8f-a3d2-388ecb9cd8bf","method":"GET","path":"/maas-api/v1/api-keys/9b99e867-8c1b-4e02-a55b-5e4335d346b9","host":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e107b4fd-64fc-4f8f-a3d2-388ecb9cd8bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:41608","PortSpecifier":{"PortValue":41608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784833118,"nanos":737053628},"http":{"id":"e107b4fd-64fc-4f8f-a3d2-388ecb9cd8bf","method":"GET","headers":{":authority":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9b99e867-8c1b-4e02-a55b-5e4335d346b9",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e107b4fd-64fc-4f8f-a3d2-388ecb9cd8bf","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e107b4fd-64fc-4f8f-a3d2-388ecb9cd8bf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbcb4750-d409-4f27-b34b-22cf6c2c21ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ea996b7d-8676-4409-a79d-af2a84ac29b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ae2263ba428"]}} {"level":"debug","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e107b4fd-64fc-4f8f-a3d2-388ecb9cd8bf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ae2263ba428"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ea996b7d-8676-4409-a79d-af2a84ac29b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbcb4750-d409-4f27-b34b-22cf6c2c21ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b8a3b735f58ac4e1dd9a9be2925a32de51a9f059d1931a7319e66f89952a8c7a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9b99e867-8c1b-4e02-a55b-5e4335d346b9",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e107b4fd-64fc-4f8f-a3d2-388ecb9cd8bf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e107b4fd-64fc-4f8f-a3d2-388ecb9cd8bf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e107b4fd-64fc-4f8f-a3d2-388ecb9cd8bf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3f12e9/auth-test-model-3f12e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3f12e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e107b4fd-64fc-4f8f-a3d2-388ecb9cd8bf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e107b4fd-64fc-4f8f-a3d2-388ecb9cd8bf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e107b4fd-64fc-4f8f-a3d2-388ecb9cd8bf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e107b4fd-64fc-4f8f-a3d2-388ecb9cd8bf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:58:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e107b4fd-64fc-4f8f-a3d2-388ecb9cd8bf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073"} {"level":"info","ts":"2026-07-23T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3"} {"level":"info","ts":"2026-07-23T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f"} {"level":"info","ts":"2026-07-23T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd"} {"level":"info","ts":"2026-07-23T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f"} {"level":"info","ts":"2026-07-23T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00"} {"level":"info","ts":"2026-07-23T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e"} {"level":"info","ts":"2026-07-23T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4"} {"level":"info","ts":"2026-07-23T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e"} {"level":"info","ts":"2026-07-23T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"} {"level":"info","ts":"2026-07-23T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"} {"level":"info","ts":"2026-07-23T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81"} {"level":"debug","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00"} {"level":"debug","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00"} {"level":"debug","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00"} {"level":"debug","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00"} {"level":"debug","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073"} {"level":"info","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073"} {"level":"info","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073"} {"level":"debug","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00"} {"level":"info","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073"} {"level":"info","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3"} {"level":"info","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073"} {"level":"debug","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3"} {"level":"debug","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073"} {"level":"info","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f"} {"level":"debug","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"} {"level":"info","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f"} {"level":"info","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"} {"level":"error","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f"} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f"} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e"} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e"} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e"} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81"} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81"} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4"} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4"} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81"} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4"} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81"} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4"} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e"} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81"} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd"} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4"} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e"} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd"} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4"} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd"} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4"} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd"} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4"} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4"} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4"} {"level":"error","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4"} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4"} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4"} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:58:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4"} {"level":"debug","ts":"2026-07-23T18:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4"} {"level":"debug","ts":"2026-07-23T18:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:58:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:58:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4"} {"level":"info","ts":"2026-07-23T18:58:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e56fca99-e565-4253-9030-9c4aca995746","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:56760","PortSpecifier":{"PortValue":56760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e56fca99-e565-4253-9030-9c4aca995746","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:58:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e56fca99-e565-4253-9030-9c4aca995746","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:56760","PortSpecifier":{"PortValue":56760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784833136,"nanos":40329310},"http":{"id":"e56fca99-e565-4253-9030-9c4aca995746","method":"POST","headers":{":authority":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:58:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e56fca99-e565-4253-9030-9c4aca995746","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:58:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e56fca99-e565-4253-9030-9c4aca995746","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbcb4750-d409-4f27-b34b-22cf6c2c21ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ea996b7d-8676-4409-a79d-af2a84ac29b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ae2263ba428"]}} {"level":"debug","ts":"2026-07-23T18:58:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e56fca99-e565-4253-9030-9c4aca995746","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ae2263ba428"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ea996b7d-8676-4409-a79d-af2a84ac29b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbcb4750-d409-4f27-b34b-22cf6c2c21ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b8a3b735f58ac4e1dd9a9be2925a32de51a9f059d1931a7319e66f89952a8c7a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:58:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e56fca99-e565-4253-9030-9c4aca995746","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:58:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e56fca99-e565-4253-9030-9c4aca995746","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:58:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e56fca99-e565-4253-9030-9c4aca995746","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3f12e9/auth-test-model-3f12e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3f12e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:58:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e56fca99-e565-4253-9030-9c4aca995746","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:58:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e56fca99-e565-4253-9030-9c4aca995746","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:58:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e56fca99-e565-4253-9030-9c4aca995746","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T18:58:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e56fca99-e565-4253-9030-9c4aca995746","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:58:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e56fca99-e565-4253-9030-9c4aca995746","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:58:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b35d256-3c2b-4726-9702-8caa3f4b3803","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:54818","PortSpecifier":{"PortValue":54818}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8b35d256-3c2b-4726-9702-8caa3f4b3803","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-60de5a.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:58:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b35d256-3c2b-4726-9702-8caa3f4b3803","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:54818","PortSpecifier":{"PortValue":54818}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784833136,"nanos":74001614},"http":{"id":"8b35d256-3c2b-4726-9702-8caa3f4b3803","method":"POST","headers":{":authority":"e2e-shared-b-60de5a.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:58:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8b35d256-3c2b-4726-9702-8caa3f4b3803","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:58:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8b35d256-3c2b-4726-9702-8caa3f4b3803","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbcb4750-d409-4f27-b34b-22cf6c2c21ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ea996b7d-8676-4409-a79d-af2a84ac29b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ae2263ba428"]}} {"level":"debug","ts":"2026-07-23T18:58:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8b35d256-3c2b-4726-9702-8caa3f4b3803","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ae2263ba428"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ea996b7d-8676-4409-a79d-af2a84ac29b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbcb4750-d409-4f27-b34b-22cf6c2c21ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-60de5a.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:58:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b35d256-3c2b-4726-9702-8caa3f4b3803","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:58:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b35d256-3c2b-4726-9702-8caa3f4b3803","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:58:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b35d256-3c2b-4726-9702-8caa3f4b3803","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-60de5a/auth-test-model-60de5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-60de5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:58:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8b35d256-3c2b-4726-9702-8caa3f4b3803","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:58:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b35d256-3c2b-4726-9702-8caa3f4b3803","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:58:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b35d256-3c2b-4726-9702-8caa3f4b3803","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T18:58:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b35d256-3c2b-4726-9702-8caa3f4b3803","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:58:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b35d256-3c2b-4726-9702-8caa3f4b3803","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:58:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6fe336ac-0dcc-4929-bca9-3a3e221feb8f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:56762","PortSpecifier":{"PortValue":56762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6fe336ac-0dcc-4929-bca9-3a3e221feb8f","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:58:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6fe336ac-0dcc-4929-bca9-3a3e221feb8f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:56762","PortSpecifier":{"PortValue":56762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784833136,"nanos":112661362},"http":{"id":"6fe336ac-0dcc-4929-bca9-3a3e221feb8f","method":"POST","headers":{":authority":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:58:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6fe336ac-0dcc-4929-bca9-3a3e221feb8f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-zvdcRtTtLQukElp_nYaYOHmUjMMZvteYhk4J7F1gssr5M0GcclcT9JyEV5U"} {"level":"debug","ts":"2026-07-23T18:58:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6fe336ac-0dcc-4929-bca9-3a3e221feb8f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3f12e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-zvdcRtTtLQukElp_nYaYOHmUjMMZvteYhk4J7F1gssr5M0GcclcT9JyEV5U\"}"} {"level":"debug","ts":"2026-07-23T18:58:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6fe336ac-0dcc-4929-bca9-3a3e221feb8f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3f12e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2713355f-3016-4d57-b489-6356cd851c97","keyName":"e2e-auth-iso-a-588125","subscription":"e2e-auth-iso-5a3d34","tenant":"e2e-shared-a-3f12e9","userId":"2713355f-3016-4d57-b489-6356cd851c97","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T18:58:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6fe336ac-0dcc-4929-bca9-3a3e221feb8f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:58:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6fe336ac-0dcc-4929-bca9-3a3e221feb8f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:58:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6fe336ac-0dcc-4929-bca9-3a3e221feb8f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:58:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6fe336ac-0dcc-4929-bca9-3a3e221feb8f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3f12e9/auth-test-model-3f12e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3f12e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:58:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6fe336ac-0dcc-4929-bca9-3a3e221feb8f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:58:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6fe336ac-0dcc-4929-bca9-3a3e221feb8f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-23T18:58:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6fe336ac-0dcc-4929-bca9-3a3e221feb8f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-5a3d34"} {"level":"debug","ts":"2026-07-23T18:58:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6fe336ac-0dcc-4929-bca9-3a3e221feb8f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T18:58:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6fe336ac-0dcc-4929-bca9-3a3e221feb8f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:58:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6fe336ac-0dcc-4929-bca9-3a3e221feb8f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"} {"level":"info","ts":"2026-07-23T18:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0be1f71aa2864c37746ccc9aaaeb4fe9962856503506b1b2f18b626ec96c36ad"} {"level":"info","ts":"2026-07-23T18:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c2e3af08a704270b873e9510c97cf7d9dc59d696821a50c889839d2e2575570"} {"level":"info","ts":"2026-07-23T18:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59dfa41f027e719f8487ce34b443eae4f7e5b4f627d09a4b2b71b1c345aa3161"} {"level":"info","ts":"2026-07-23T18:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de90996c352989fc8f907d9a8443fcddb03627b948a5247fcae4f98b42cbd3e6"} {"level":"info","ts":"2026-07-23T18:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b2fa56b95108d65237dd2cb088737f63e2d65bd736b8392d1fe5c84c5f09a00"} {"level":"info","ts":"2026-07-23T18:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f8f5706b26ceb3a3fcc77d81e404fd8324b89d3ce7e60cd36a769c6b53d46b4"} {"level":"info","ts":"2026-07-23T18:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e276e86fc69c6ca4be4ff96a9a55e52c7f4f68f7c81c13b27d0d7af95ac429e"} {"level":"info","ts":"2026-07-23T18:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b8a3b735f58ac4e1dd9a9be2925a32de51a9f059d1931a7319e66f89952a8c7a"} {"level":"info","ts":"2026-07-23T18:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/49277ae315a57c8e4a95d18c7236b3da38ed648eda11a201dfdd5b1ef51cd9ca"} {"level":"info","ts":"2026-07-23T18:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9ad0982fc393f55af07cbac08fccfa08d910c056fd64b8ac302af3c7584b7f0"} {"level":"info","ts":"2026-07-23T18:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3d0cffd89ab1b54590af006906cf2d46341140dbb00a3dabb1b3ebf10423a5f"} {"level":"info","ts":"2026-07-23T18:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd"} {"level":"info","ts":"2026-07-23T18:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81"} {"level":"info","ts":"2026-07-23T18:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29d08830320153b7a0c0a1e99ffde5bf200616be522dd4baf0e3b786e7e342e4"} {"level":"info","ts":"2026-07-23T18:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b7a52f9ef5203a36ab0c3bf403d4e77fe99766f799dba99d610532ee67b3906f"} {"level":"info","ts":"2026-07-23T18:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c380e2f3c756bc57cef8d1d61b9e00eb202b8370ba18c6f7f1a7e40154d900d"} {"level":"info","ts":"2026-07-23T18:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"} {"level":"info","ts":"2026-07-23T18:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b60681c14aaa11780372e048f5a8792a83edbab88f879732c8dd5ef6f599df3"} {"level":"info","ts":"2026-07-23T18:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6cec54f7e9bd5423f2070a6a904cba4679bfa681bce03e4f25af4dd0e44ad1ec"} {"level":"info","ts":"2026-07-23T18:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2f197132e825ac967f1522e2a27232ca987bf9d9d2e3e08f671b8bdede4fd2e"} {"level":"info","ts":"2026-07-23T18:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ba0d3c7281e872711a5a41c0e57b05fa646c667f7174bc952820007550bcf80"} {"level":"info","ts":"2026-07-23T18:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/782acc43053a15c5bdf3ebe6adf90fe9a2e51f512fc9c4c002c700f3711e3073"} {"level":"info","ts":"2026-07-23T18:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd834b213b6fc98c8613066b256114a7b4f5a2839cadd1a8c55c3a72c42075d3"} {"level":"debug","ts":"2026-07-23T19:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a697cac8ffec1d97cff44fddc35e31838a7f537e1df077b9a74418e334d199e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:00:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:00:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a697cac8ffec1d97cff44fddc35e31838a7f537e1df077b9a74418e334d199e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a697cac8ffec1d97cff44fddc35e31838a7f537e1df077b9a74418e334d199e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a697cac8ffec1d97cff44fddc35e31838a7f537e1df077b9a74418e334d199e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a697cac8ffec1d97cff44fddc35e31838a7f537e1df077b9a74418e334d199e"} {"level":"debug","ts":"2026-07-23T19:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a697cac8ffec1d97cff44fddc35e31838a7f537e1df077b9a74418e334d199e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a697cac8ffec1d97cff44fddc35e31838a7f537e1df077b9a74418e334d199e"} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a697cac8ffec1d97cff44fddc35e31838a7f537e1df077b9a74418e334d199e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a697cac8ffec1d97cff44fddc35e31838a7f537e1df077b9a74418e334d199e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a697cac8ffec1d97cff44fddc35e31838a7f537e1df077b9a74418e334d199e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a697cac8ffec1d97cff44fddc35e31838a7f537e1df077b9a74418e334d199e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a697cac8ffec1d97cff44fddc35e31838a7f537e1df077b9a74418e334d199e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a697cac8ffec1d97cff44fddc35e31838a7f537e1df077b9a74418e334d199e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a697cac8ffec1d97cff44fddc35e31838a7f537e1df077b9a74418e334d199e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a697cac8ffec1d97cff44fddc35e31838a7f537e1df077b9a74418e334d199e"} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a697cac8ffec1d97cff44fddc35e31838a7f537e1df077b9a74418e334d199e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a697cac8ffec1d97cff44fddc35e31838a7f537e1df077b9a74418e334d199e"} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a697cac8ffec1d97cff44fddc35e31838a7f537e1df077b9a74418e334d199e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a697cac8ffec1d97cff44fddc35e31838a7f537e1df077b9a74418e334d199e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a697cac8ffec1d97cff44fddc35e31838a7f537e1df077b9a74418e334d199e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a697cac8ffec1d97cff44fddc35e31838a7f537e1df077b9a74418e334d199e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a697cac8ffec1d97cff44fddc35e31838a7f537e1df077b9a74418e334d199e"} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ba0d3c7281e872711a5a41c0e57b05fa646c667f7174bc952820007550bcf80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ba0d3c7281e872711a5a41c0e57b05fa646c667f7174bc952820007550bcf80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ba0d3c7281e872711a5a41c0e57b05fa646c667f7174bc952820007550bcf80","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ba0d3c7281e872711a5a41c0e57b05fa646c667f7174bc952820007550bcf80"} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ba0d3c7281e872711a5a41c0e57b05fa646c667f7174bc952820007550bcf80","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ba0d3c7281e872711a5a41c0e57b05fa646c667f7174bc952820007550bcf80"} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ba0d3c7281e872711a5a41c0e57b05fa646c667f7174bc952820007550bcf80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ba0d3c7281e872711a5a41c0e57b05fa646c667f7174bc952820007550bcf80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ba0d3c7281e872711a5a41c0e57b05fa646c667f7174bc952820007550bcf80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ba0d3c7281e872711a5a41c0e57b05fa646c667f7174bc952820007550bcf80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ba0d3c7281e872711a5a41c0e57b05fa646c667f7174bc952820007550bcf80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ba0d3c7281e872711a5a41c0e57b05fa646c667f7174bc952820007550bcf80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ba0d3c7281e872711a5a41c0e57b05fa646c667f7174bc952820007550bcf80","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ba0d3c7281e872711a5a41c0e57b05fa646c667f7174bc952820007550bcf80"} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9997e4257d18694cfa10a211bd7da56ebc322e7fa122b788304fdabfb5dff736","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ba0d3c7281e872711a5a41c0e57b05fa646c667f7174bc952820007550bcf80"} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9997e4257d18694cfa10a211bd7da56ebc322e7fa122b788304fdabfb5dff736","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ba0d3c7281e872711a5a41c0e57b05fa646c667f7174bc952820007550bcf80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ba0d3c7281e872711a5a41c0e57b05fa646c667f7174bc952820007550bcf80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ba0d3c7281e872711a5a41c0e57b05fa646c667f7174bc952820007550bcf80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9997e4257d18694cfa10a211bd7da56ebc322e7fa122b788304fdabfb5dff736","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9997e4257d18694cfa10a211bd7da56ebc322e7fa122b788304fdabfb5dff736"} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9997e4257d18694cfa10a211bd7da56ebc322e7fa122b788304fdabfb5dff736","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ba0d3c7281e872711a5a41c0e57b05fa646c667f7174bc952820007550bcf80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9997e4257d18694cfa10a211bd7da56ebc322e7fa122b788304fdabfb5dff736","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9997e4257d18694cfa10a211bd7da56ebc322e7fa122b788304fdabfb5dff736"} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9997e4257d18694cfa10a211bd7da56ebc322e7fa122b788304fdabfb5dff736","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9997e4257d18694cfa10a211bd7da56ebc322e7fa122b788304fdabfb5dff736"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9997e4257d18694cfa10a211bd7da56ebc322e7fa122b788304fdabfb5dff736","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ba0d3c7281e872711a5a41c0e57b05fa646c667f7174bc952820007550bcf80"} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9997e4257d18694cfa10a211bd7da56ebc322e7fa122b788304fdabfb5dff736","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9997e4257d18694cfa10a211bd7da56ebc322e7fa122b788304fdabfb5dff736","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9997e4257d18694cfa10a211bd7da56ebc322e7fa122b788304fdabfb5dff736","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9997e4257d18694cfa10a211bd7da56ebc322e7fa122b788304fdabfb5dff736","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9997e4257d18694cfa10a211bd7da56ebc322e7fa122b788304fdabfb5dff736"} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"befd00d906aeed8734261a234b7fe8b1a70c47735f1ac1c544e9a1a9e7bd2039","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9997e4257d18694cfa10a211bd7da56ebc322e7fa122b788304fdabfb5dff736"} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"befd00d906aeed8734261a234b7fe8b1a70c47735f1ac1c544e9a1a9e7bd2039","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9997e4257d18694cfa10a211bd7da56ebc322e7fa122b788304fdabfb5dff736","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9997e4257d18694cfa10a211bd7da56ebc322e7fa122b788304fdabfb5dff736"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9997e4257d18694cfa10a211bd7da56ebc322e7fa122b788304fdabfb5dff736","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"befd00d906aeed8734261a234b7fe8b1a70c47735f1ac1c544e9a1a9e7bd2039","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/befd00d906aeed8734261a234b7fe8b1a70c47735f1ac1c544e9a1a9e7bd2039"} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"befd00d906aeed8734261a234b7fe8b1a70c47735f1ac1c544e9a1a9e7bd2039","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9997e4257d18694cfa10a211bd7da56ebc322e7fa122b788304fdabfb5dff736","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"befd00d906aeed8734261a234b7fe8b1a70c47735f1ac1c544e9a1a9e7bd2039","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/befd00d906aeed8734261a234b7fe8b1a70c47735f1ac1c544e9a1a9e7bd2039"} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"befd00d906aeed8734261a234b7fe8b1a70c47735f1ac1c544e9a1a9e7bd2039","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["befd00d906aeed8734261a234b7fe8b1a70c47735f1ac1c544e9a1a9e7bd2039"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"befd00d906aeed8734261a234b7fe8b1a70c47735f1ac1c544e9a1a9e7bd2039","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9997e4257d18694cfa10a211bd7da56ebc322e7fa122b788304fdabfb5dff736"} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"befd00d906aeed8734261a234b7fe8b1a70c47735f1ac1c544e9a1a9e7bd2039","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"befd00d906aeed8734261a234b7fe8b1a70c47735f1ac1c544e9a1a9e7bd2039","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"befd00d906aeed8734261a234b7fe8b1a70c47735f1ac1c544e9a1a9e7bd2039","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/befd00d906aeed8734261a234b7fe8b1a70c47735f1ac1c544e9a1a9e7bd2039"} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"befd00d906aeed8734261a234b7fe8b1a70c47735f1ac1c544e9a1a9e7bd2039","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["befd00d906aeed8734261a234b7fe8b1a70c47735f1ac1c544e9a1a9e7bd2039"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"befd00d906aeed8734261a234b7fe8b1a70c47735f1ac1c544e9a1a9e7bd2039","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c2e3af08a704270b873e9510c97cf7d9dc59d696821a50c889839d2e2575570","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/befd00d906aeed8734261a234b7fe8b1a70c47735f1ac1c544e9a1a9e7bd2039"} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c2e3af08a704270b873e9510c97cf7d9dc59d696821a50c889839d2e2575570","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"befd00d906aeed8734261a234b7fe8b1a70c47735f1ac1c544e9a1a9e7bd2039","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c2e3af08a704270b873e9510c97cf7d9dc59d696821a50c889839d2e2575570"} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c2e3af08a704270b873e9510c97cf7d9dc59d696821a50c889839d2e2575570","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c2e3af08a704270b873e9510c97cf7d9dc59d696821a50c889839d2e2575570"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c2e3af08a704270b873e9510c97cf7d9dc59d696821a50c889839d2e2575570","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/befd00d906aeed8734261a234b7fe8b1a70c47735f1ac1c544e9a1a9e7bd2039"} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c2e3af08a704270b873e9510c97cf7d9dc59d696821a50c889839d2e2575570","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd"} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c2e3af08a704270b873e9510c97cf7d9dc59d696821a50c889839d2e2575570"} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd"} {"level":"error","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd"} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd"} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"680d1eaee32f5d0f37f52d5057eb1439590d4b253efe8a70bc2691dbb7c5e445","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"680d1eaee32f5d0f37f52d5057eb1439590d4b253efe8a70bc2691dbb7c5e445","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"680d1eaee32f5d0f37f52d5057eb1439590d4b253efe8a70bc2691dbb7c5e445","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dd1056b0526220160cb3c32a3ce4918d764ec24e71e7cdf0c772f7c6a02a71d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/680d1eaee32f5d0f37f52d5057eb1439590d4b253efe8a70bc2691dbb7c5e445"} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dd1056b0526220160cb3c32a3ce4918d764ec24e71e7cdf0c772f7c6a02a71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"680d1eaee32f5d0f37f52d5057eb1439590d4b253efe8a70bc2691dbb7c5e445","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["680d1eaee32f5d0f37f52d5057eb1439590d4b253efe8a70bc2691dbb7c5e445"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dd1056b0526220160cb3c32a3ce4918d764ec24e71e7cdf0c772f7c6a02a71d"} {"level":"info","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"680d1eaee32f5d0f37f52d5057eb1439590d4b253efe8a70bc2691dbb7c5e445","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dd1056b0526220160cb3c32a3ce4918d764ec24e71e7cdf0c772f7c6a02a71d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:00:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0dd1056b0526220160cb3c32a3ce4918d764ec24e71e7cdf0c772f7c6a02a71d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/680d1eaee32f5d0f37f52d5057eb1439590d4b253efe8a70bc2691dbb7c5e445"} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dd1056b0526220160cb3c32a3ce4918d764ec24e71e7cdf0c772f7c6a02a71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"680d1eaee32f5d0f37f52d5057eb1439590d4b253efe8a70bc2691dbb7c5e445","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dd1056b0526220160cb3c32a3ce4918d764ec24e71e7cdf0c772f7c6a02a71d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dd1056b0526220160cb3c32a3ce4918d764ec24e71e7cdf0c772f7c6a02a71d"} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dd1056b0526220160cb3c32a3ce4918d764ec24e71e7cdf0c772f7c6a02a71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dd1056b0526220160cb3c32a3ce4918d764ec24e71e7cdf0c772f7c6a02a71d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0dd1056b0526220160cb3c32a3ce4918d764ec24e71e7cdf0c772f7c6a02a71d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/680d1eaee32f5d0f37f52d5057eb1439590d4b253efe8a70bc2691dbb7c5e445"} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dd1056b0526220160cb3c32a3ce4918d764ec24e71e7cdf0c772f7c6a02a71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"136acea8d0d99b571d3a97b0bcaf4068c510507ca271c96188a3f31298ced1d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"136acea8d0d99b571d3a97b0bcaf4068c510507ca271c96188a3f31298ced1d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dd1056b0526220160cb3c32a3ce4918d764ec24e71e7cdf0c772f7c6a02a71d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dd1056b0526220160cb3c32a3ce4918d764ec24e71e7cdf0c772f7c6a02a71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dd1056b0526220160cb3c32a3ce4918d764ec24e71e7cdf0c772f7c6a02a71d"} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"136acea8d0d99b571d3a97b0bcaf4068c510507ca271c96188a3f31298ced1d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"136acea8d0d99b571d3a97b0bcaf4068c510507ca271c96188a3f31298ced1d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dd1056b0526220160cb3c32a3ce4918d764ec24e71e7cdf0c772f7c6a02a71d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0dd1056b0526220160cb3c32a3ce4918d764ec24e71e7cdf0c772f7c6a02a71d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/136acea8d0d99b571d3a97b0bcaf4068c510507ca271c96188a3f31298ced1d6"} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dd1056b0526220160cb3c32a3ce4918d764ec24e71e7cdf0c772f7c6a02a71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"136acea8d0d99b571d3a97b0bcaf4068c510507ca271c96188a3f31298ced1d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["136acea8d0d99b571d3a97b0bcaf4068c510507ca271c96188a3f31298ced1d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dd1056b0526220160cb3c32a3ce4918d764ec24e71e7cdf0c772f7c6a02a71d"} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"136acea8d0d99b571d3a97b0bcaf4068c510507ca271c96188a3f31298ced1d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2965d62493a53c6253005929e45fe8f1d4efeca5bb2f31b7f487c60f1a1d69ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81"} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2965d62493a53c6253005929e45fe8f1d4efeca5bb2f31b7f487c60f1a1d69ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0dd1056b0526220160cb3c32a3ce4918d764ec24e71e7cdf0c772f7c6a02a71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97dea8c68cf77fe0bebde0b7b82066a2262bd3f8833f560ff71c89d14db98cb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2965d62493a53c6253005929e45fe8f1d4efeca5bb2f31b7f487c60f1a1d69ad"} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97dea8c68cf77fe0bebde0b7b82066a2262bd3f8833f560ff71c89d14db98cb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/136acea8d0d99b571d3a97b0bcaf4068c510507ca271c96188a3f31298ced1d6"} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97dea8c68cf77fe0bebde0b7b82066a2262bd3f8833f560ff71c89d14db98cb8"} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"136acea8d0d99b571d3a97b0bcaf4068c510507ca271c96188a3f31298ced1d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2965d62493a53c6253005929e45fe8f1d4efeca5bb2f31b7f487c60f1a1d69ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2965d62493a53c6253005929e45fe8f1d4efeca5bb2f31b7f487c60f1a1d69ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2965d62493a53c6253005929e45fe8f1d4efeca5bb2f31b7f487c60f1a1d69ad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b28cfae7b9902a1c819ef6b797aee06608bf1318138f9ae4c793da1cc08d283c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b28cfae7b9902a1c819ef6b797aee06608bf1318138f9ae4c793da1cc08d283c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97dea8c68cf77fe0bebde0b7b82066a2262bd3f8833f560ff71c89d14db98cb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97dea8c68cf77fe0bebde0b7b82066a2262bd3f8833f560ff71c89d14db98cb8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b28cfae7b9902a1c819ef6b797aee06608bf1318138f9ae4c793da1cc08d283c"} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97dea8c68cf77fe0bebde0b7b82066a2262bd3f8833f560ff71c89d14db98cb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c16ae9f31626a037ee1a66fcbf51171ca541bf003a73dca53a9cafe2837ce35d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2965d62493a53c6253005929e45fe8f1d4efeca5bb2f31b7f487c60f1a1d69ad"} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c16ae9f31626a037ee1a66fcbf51171ca541bf003a73dca53a9cafe2837ce35d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f8f5706b26ceb3a3fcc77d81e404fd8324b89d3ce7e60cd36a769c6b53d46b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c16ae9f31626a037ee1a66fcbf51171ca541bf003a73dca53a9cafe2837ce35d"} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f8f5706b26ceb3a3fcc77d81e404fd8324b89d3ce7e60cd36a769c6b53d46b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c26a3581282c849e57349f16b122d70e56132b3fcd363f7caae59342d3c0134","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c26a3581282c849e57349f16b122d70e56132b3fcd363f7caae59342d3c0134","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2965d62493a53c6253005929e45fe8f1d4efeca5bb2f31b7f487c60f1a1d69ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b28cfae7b9902a1c819ef6b797aee06608bf1318138f9ae4c793da1cc08d283c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b28cfae7b9902a1c819ef6b797aee06608bf1318138f9ae4c793da1cc08d283c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f8f5706b26ceb3a3fcc77d81e404fd8324b89d3ce7e60cd36a769c6b53d46b4"} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b28cfae7b9902a1c819ef6b797aee06608bf1318138f9ae4c793da1cc08d283c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8a3b735f58ac4e1dd9a9be2925a32de51a9f059d1931a7319e66f89952a8c7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c26a3581282c849e57349f16b122d70e56132b3fcd363f7caae59342d3c0134"} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81"} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b28cfae7b9902a1c819ef6b797aee06608bf1318138f9ae4c793da1cc08d283c"} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8a3b735f58ac4e1dd9a9be2925a32de51a9f059d1931a7319e66f89952a8c7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97dea8c68cf77fe0bebde0b7b82066a2262bd3f8833f560ff71c89d14db98cb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8a3b735f58ac4e1dd9a9be2925a32de51a9f059d1931a7319e66f89952a8c7a"} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97dea8c68cf77fe0bebde0b7b82066a2262bd3f8833f560ff71c89d14db98cb8"} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c16ae9f31626a037ee1a66fcbf51171ca541bf003a73dca53a9cafe2837ce35d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c16ae9f31626a037ee1a66fcbf51171ca541bf003a73dca53a9cafe2837ce35d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5"} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b09584547868d2da46fe618c438464b04026a186dd70ad7999652b81efee254"} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c16ae9f31626a037ee1a66fcbf51171ca541bf003a73dca53a9cafe2837ce35d"} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c16ae9f31626a037ee1a66fcbf51171ca541bf003a73dca53a9cafe2837ce35d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b09584547868d2da46fe618c438464b04026a186dd70ad7999652b81efee254","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b09584547868d2da46fe618c438464b04026a186dd70ad7999652b81efee254"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf633ac830b20a1b3ec828afc9b327a60b3d50175db2232fcad037f437942190"} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f8f5706b26ceb3a3fcc77d81e404fd8324b89d3ce7e60cd36a769c6b53d46b4"} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b09584547868d2da46fe618c438464b04026a186dd70ad7999652b81efee254","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f8f5706b26ceb3a3fcc77d81e404fd8324b89d3ce7e60cd36a769c6b53d46b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f8f5706b26ceb3a3fcc77d81e404fd8324b89d3ce7e60cd36a769c6b53d46b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d25e28b0a9b6e1e6dbc609682bac6402d866762a5b153c16369300e780de4425"} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70255109045fce772961a6996dc00c30d5c75d5a98620a09231660cc68c47d2f"} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8a3b735f58ac4e1dd9a9be2925a32de51a9f059d1931a7319e66f89952a8c7a"} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f8f5706b26ceb3a3fcc77d81e404fd8324b89d3ce7e60cd36a769c6b53d46b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf633ac830b20a1b3ec828afc9b327a60b3d50175db2232fcad037f437942190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf633ac830b20a1b3ec828afc9b327a60b3d50175db2232fcad037f437942190"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5"} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c16ae9f31626a037ee1a66fcbf51171ca541bf003a73dca53a9cafe2837ce35d"} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf633ac830b20a1b3ec828afc9b327a60b3d50175db2232fcad037f437942190","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c26a3581282c849e57349f16b122d70e56132b3fcd363f7caae59342d3c0134","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c26a3581282c849e57349f16b122d70e56132b3fcd363f7caae59342d3c0134"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b09584547868d2da46fe618c438464b04026a186dd70ad7999652b81efee254"} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f8f5706b26ceb3a3fcc77d81e404fd8324b89d3ce7e60cd36a769c6b53d46b4"} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c26a3581282c849e57349f16b122d70e56132b3fcd363f7caae59342d3c0134","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b28cfae7b9902a1c819ef6b797aee06608bf1318138f9ae4c793da1cc08d283c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d25e28b0a9b6e1e6dbc609682bac6402d866762a5b153c16369300e780de4425","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d25e28b0a9b6e1e6dbc609682bac6402d866762a5b153c16369300e780de4425"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf633ac830b20a1b3ec828afc9b327a60b3d50175db2232fcad037f437942190"} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c26a3581282c849e57349f16b122d70e56132b3fcd363f7caae59342d3c0134"} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d25e28b0a9b6e1e6dbc609682bac6402d866762a5b153c16369300e780de4425","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70255109045fce772961a6996dc00c30d5c75d5a98620a09231660cc68c47d2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70255109045fce772961a6996dc00c30d5c75d5a98620a09231660cc68c47d2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d25e28b0a9b6e1e6dbc609682bac6402d866762a5b153c16369300e780de4425"} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70255109045fce772961a6996dc00c30d5c75d5a98620a09231660cc68c47d2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8a3b735f58ac4e1dd9a9be2925a32de51a9f059d1931a7319e66f89952a8c7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8a3b735f58ac4e1dd9a9be2925a32de51a9f059d1931a7319e66f89952a8c7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70255109045fce772961a6996dc00c30d5c75d5a98620a09231660cc68c47d2f"} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8a3b735f58ac4e1dd9a9be2925a32de51a9f059d1931a7319e66f89952a8c7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8a3b735f58ac4e1dd9a9be2925a32de51a9f059d1931a7319e66f89952a8c7a"} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c16ae9f31626a037ee1a66fcbf51171ca541bf003a73dca53a9cafe2837ce35d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b09584547868d2da46fe618c438464b04026a186dd70ad7999652b81efee254","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f8f5706b26ceb3a3fcc77d81e404fd8324b89d3ce7e60cd36a769c6b53d46b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf633ac830b20a1b3ec828afc9b327a60b3d50175db2232fcad037f437942190","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c26a3581282c849e57349f16b122d70e56132b3fcd363f7caae59342d3c0134","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d25e28b0a9b6e1e6dbc609682bac6402d866762a5b153c16369300e780de4425","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70255109045fce772961a6996dc00c30d5c75d5a98620a09231660cc68c47d2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8a3b735f58ac4e1dd9a9be2925a32de51a9f059d1931a7319e66f89952a8c7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:00:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5"} {"level":"info","ts":"2026-07-23T19:00:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:00:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5"} {"level":"debug","ts":"2026-07-23T19:00:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:00:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:00:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:00:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:00:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5"} {"level":"info","ts":"2026-07-23T19:00:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:00:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:00:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:00:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:00:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5"} {"level":"info","ts":"2026-07-23T19:00:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5"} {"level":"info","ts":"2026-07-23T19:00:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:00:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5"} {"level":"debug","ts":"2026-07-23T19:00:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:00:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:00:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:00:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:00:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5"} {"level":"info","ts":"2026-07-23T19:00:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:00:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:00:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5"} {"level":"info","ts":"2026-07-23T19:00:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:00:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:00:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:00:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5"} {"level":"error","ts":"2026-07-23T19:00:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T19:00:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:00:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:00:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0deba740-d214-4e24-8fff-8c8f32d1a645","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:58340","PortSpecifier":{"PortValue":58340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0deba740-d214-4e24-8fff-8c8f32d1a645","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T19:00:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0deba740-d214-4e24-8fff-8c8f32d1a645","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:58340","PortSpecifier":{"PortValue":58340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784833216,"nanos":947594823},"http":{"id":"0deba740-d214-4e24-8fff-8c8f32d1a645","method":"POST","headers":{":authority":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:00:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0deba740-d214-4e24-8fff-8c8f32d1a645","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T19:00:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0deba740-d214-4e24-8fff-8c8f32d1a645","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbcb4750-d409-4f27-b34b-22cf6c2c21ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ea996b7d-8676-4409-a79d-af2a84ac29b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ae2263ba428"]}} {"level":"debug","ts":"2026-07-23T19:00:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0deba740-d214-4e24-8fff-8c8f32d1a645","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ae2263ba428"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ea996b7d-8676-4409-a79d-af2a84ac29b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbcb4750-d409-4f27-b34b-22cf6c2c21ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b8a3b735f58ac4e1dd9a9be2925a32de51a9f059d1931a7319e66f89952a8c7a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:00:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0deba740-d214-4e24-8fff-8c8f32d1a645","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:00:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0deba740-d214-4e24-8fff-8c8f32d1a645","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:00:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0deba740-d214-4e24-8fff-8c8f32d1a645","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3f12e9/sub-test-model-3f12e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3f12e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:00:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0deba740-d214-4e24-8fff-8c8f32d1a645","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T19:00:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0deba740-d214-4e24-8fff-8c8f32d1a645","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T19:00:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0deba740-d214-4e24-8fff-8c8f32d1a645","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T19:00:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0deba740-d214-4e24-8fff-8c8f32d1a645","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T19:00:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0deba740-d214-4e24-8fff-8c8f32d1a645","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T19:00:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54400a9e-d1d4-4df3-8bd4-b040783f2fbf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:38398","PortSpecifier":{"PortValue":38398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"54400a9e-d1d4-4df3-8bd4-b040783f2fbf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-60de5a.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T19:00:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54400a9e-d1d4-4df3-8bd4-b040783f2fbf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:38398","PortSpecifier":{"PortValue":38398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784833216,"nanos":986036614},"http":{"id":"54400a9e-d1d4-4df3-8bd4-b040783f2fbf","method":"POST","headers":{":authority":"e2e-shared-b-60de5a.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:00:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"54400a9e-d1d4-4df3-8bd4-b040783f2fbf","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T19:00:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"54400a9e-d1d4-4df3-8bd4-b040783f2fbf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbcb4750-d409-4f27-b34b-22cf6c2c21ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ea996b7d-8676-4409-a79d-af2a84ac29b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ae2263ba428"]}} {"level":"debug","ts":"2026-07-23T19:00:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"54400a9e-d1d4-4df3-8bd4-b040783f2fbf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ae2263ba428"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ea996b7d-8676-4409-a79d-af2a84ac29b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbcb4750-d409-4f27-b34b-22cf6c2c21ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-60de5a.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:00:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54400a9e-d1d4-4df3-8bd4-b040783f2fbf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:00:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54400a9e-d1d4-4df3-8bd4-b040783f2fbf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:00:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54400a9e-d1d4-4df3-8bd4-b040783f2fbf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-60de5a/sub-test-model-60de5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-60de5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:00:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"54400a9e-d1d4-4df3-8bd4-b040783f2fbf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T19:00:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54400a9e-d1d4-4df3-8bd4-b040783f2fbf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T19:00:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54400a9e-d1d4-4df3-8bd4-b040783f2fbf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T19:00:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54400a9e-d1d4-4df3-8bd4-b040783f2fbf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T19:00:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54400a9e-d1d4-4df3-8bd4-b040783f2fbf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T19:00:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8d8d18f-fb49-4735-aae4-e1c9c7096112","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:58344","PortSpecifier":{"PortValue":58344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c8d8d18f-fb49-4735-aae4-e1c9c7096112","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T19:00:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8d8d18f-fb49-4735-aae4-e1c9c7096112","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:58344","PortSpecifier":{"PortValue":58344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784833217,"nanos":29853785},"http":{"id":"c8d8d18f-fb49-4735-aae4-e1c9c7096112","method":"GET","headers":{":authority":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:00:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c8d8d18f-fb49-4735-aae4-e1c9c7096112","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-y13jYTiJgK9nUeDZ_lXoaKpWeVIDBTFuNxMjOCwrNFhnJm4y9s2srPRtk43j"} {"level":"debug","ts":"2026-07-23T19:00:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c8d8d18f-fb49-4735-aae4-e1c9c7096112","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3f12e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-y13jYTiJgK9nUeDZ_lXoaKpWeVIDBTFuNxMjOCwrNFhnJm4y9s2srPRtk43j\"}"} {"level":"debug","ts":"2026-07-23T19:00:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c8d8d18f-fb49-4735-aae4-e1c9c7096112","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3f12e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fe5ed035-07eb-4779-8878-0cd920d15e97","keyName":"e2e-sub-iso-324d19","subscription":"e2e-a-only-4255cc","tenant":"e2e-shared-a-3f12e9","userId":"fe5ed035-07eb-4779-8878-0cd920d15e97","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T19:00:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c8d8d18f-fb49-4735-aae4-e1c9c7096112","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:00:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8d8d18f-fb49-4735-aae4-e1c9c7096112","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:00:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8d8d18f-fb49-4735-aae4-e1c9c7096112","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:00:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8d8d18f-fb49-4735-aae4-e1c9c7096112","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3f12e9/sub-test-model-3f12e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3f12e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:00:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8d8d18f-fb49-4735-aae4-e1c9c7096112","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T19:00:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8d8d18f-fb49-4735-aae4-e1c9c7096112","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-4255cc"} {"level":"debug","ts":"2026-07-23T19:00:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8d8d18f-fb49-4735-aae4-e1c9c7096112","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T19:00:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c8d8d18f-fb49-4735-aae4-e1c9c7096112","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-23T19:00:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8d8d18f-fb49-4735-aae4-e1c9c7096112","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T19:00:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8d8d18f-fb49-4735-aae4-e1c9c7096112","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T19:00:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"860a2eaf-5ac1-4769-a07c-5dcb33a9766c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:38412","PortSpecifier":{"PortValue":38412}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"860a2eaf-5ac1-4769-a07c-5dcb33a9766c","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-60de5a.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T19:00:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"860a2eaf-5ac1-4769-a07c-5dcb33a9766c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:38412","PortSpecifier":{"PortValue":38412}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784833217,"nanos":72420658},"http":{"id":"860a2eaf-5ac1-4769-a07c-5dcb33a9766c","method":"GET","headers":{":authority":"e2e-shared-b-60de5a.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:00:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"860a2eaf-5ac1-4769-a07c-5dcb33a9766c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Jp62vhbuqDEAd4XB_PthxcW4N5ARp0xbVgm3dE5rrnlAyZwdEiIxRsa3jFeY"} {"level":"debug","ts":"2026-07-23T19:00:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"860a2eaf-5ac1-4769-a07c-5dcb33a9766c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-60de5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Jp62vhbuqDEAd4XB_PthxcW4N5ARp0xbVgm3dE5rrnlAyZwdEiIxRsa3jFeY\"}"} {"level":"debug","ts":"2026-07-23T19:00:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"860a2eaf-5ac1-4769-a07c-5dcb33a9766c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-60de5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6fa3bdb2-7ca4-43e5-9b4b-3e099978aba8","keyName":"e2e-sub-iso-46e446","subscription":"e2e-b-only-4255cc","tenant":"e2e-shared-b-60de5a","userId":"6fa3bdb2-7ca4-43e5-9b4b-3e099978aba8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T19:00:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"860a2eaf-5ac1-4769-a07c-5dcb33a9766c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:00:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"860a2eaf-5ac1-4769-a07c-5dcb33a9766c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:00:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"860a2eaf-5ac1-4769-a07c-5dcb33a9766c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:00:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"860a2eaf-5ac1-4769-a07c-5dcb33a9766c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-60de5a/sub-test-model-60de5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-60de5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:00:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"860a2eaf-5ac1-4769-a07c-5dcb33a9766c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-23T19:00:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"860a2eaf-5ac1-4769-a07c-5dcb33a9766c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T19:00:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"860a2eaf-5ac1-4769-a07c-5dcb33a9766c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-4255cc"} {"level":"debug","ts":"2026-07-23T19:00:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"860a2eaf-5ac1-4769-a07c-5dcb33a9766c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T19:00:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"860a2eaf-5ac1-4769-a07c-5dcb33a9766c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T19:00:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"860a2eaf-5ac1-4769-a07c-5dcb33a9766c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2203c5af-6098-4830-bbc7-37b52613d636","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:41012","PortSpecifier":{"PortValue":41012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2203c5af-6098-4830-bbc7-37b52613d636","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2203c5af-6098-4830-bbc7-37b52613d636","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:41012","PortSpecifier":{"PortValue":41012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784833227,"nanos":210814338},"http":{"id":"2203c5af-6098-4830-bbc7-37b52613d636","method":"POST","headers":{":authority":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2203c5af-6098-4830-bbc7-37b52613d636","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2203c5af-6098-4830-bbc7-37b52613d636","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbcb4750-d409-4f27-b34b-22cf6c2c21ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ea996b7d-8676-4409-a79d-af2a84ac29b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ae2263ba428"]}} {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2203c5af-6098-4830-bbc7-37b52613d636","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ae2263ba428"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ea996b7d-8676-4409-a79d-af2a84ac29b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbcb4750-d409-4f27-b34b-22cf6c2c21ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b8a3b735f58ac4e1dd9a9be2925a32de51a9f059d1931a7319e66f89952a8c7a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2203c5af-6098-4830-bbc7-37b52613d636","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2203c5af-6098-4830-bbc7-37b52613d636","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2203c5af-6098-4830-bbc7-37b52613d636","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3f12e9/sub-test-model-3f12e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3f12e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2203c5af-6098-4830-bbc7-37b52613d636","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2203c5af-6098-4830-bbc7-37b52613d636","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2203c5af-6098-4830-bbc7-37b52613d636","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2203c5af-6098-4830-bbc7-37b52613d636","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2203c5af-6098-4830-bbc7-37b52613d636","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"609cb133-bafb-4161-9e48-f2cc8dd2c53f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:41322","PortSpecifier":{"PortValue":41322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"609cb133-bafb-4161-9e48-f2cc8dd2c53f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-60de5a.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"609cb133-bafb-4161-9e48-f2cc8dd2c53f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:41322","PortSpecifier":{"PortValue":41322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784833227,"nanos":243048281},"http":{"id":"609cb133-bafb-4161-9e48-f2cc8dd2c53f","method":"POST","headers":{":authority":"e2e-shared-b-60de5a.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"609cb133-bafb-4161-9e48-f2cc8dd2c53f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"609cb133-bafb-4161-9e48-f2cc8dd2c53f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbcb4750-d409-4f27-b34b-22cf6c2c21ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ea996b7d-8676-4409-a79d-af2a84ac29b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ae2263ba428"]}} {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"609cb133-bafb-4161-9e48-f2cc8dd2c53f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ae2263ba428"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ea996b7d-8676-4409-a79d-af2a84ac29b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbcb4750-d409-4f27-b34b-22cf6c2c21ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-60de5a.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"609cb133-bafb-4161-9e48-f2cc8dd2c53f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"609cb133-bafb-4161-9e48-f2cc8dd2c53f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"609cb133-bafb-4161-9e48-f2cc8dd2c53f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-60de5a/sub-test-model-60de5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-60de5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"609cb133-bafb-4161-9e48-f2cc8dd2c53f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"609cb133-bafb-4161-9e48-f2cc8dd2c53f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"609cb133-bafb-4161-9e48-f2cc8dd2c53f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"609cb133-bafb-4161-9e48-f2cc8dd2c53f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"609cb133-bafb-4161-9e48-f2cc8dd2c53f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"155cd244-3b07-41f6-9390-339e32c6dc6f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:41022","PortSpecifier":{"PortValue":41022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"155cd244-3b07-41f6-9390-339e32c6dc6f","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"155cd244-3b07-41f6-9390-339e32c6dc6f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:41022","PortSpecifier":{"PortValue":41022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784833227,"nanos":276159773},"http":{"id":"155cd244-3b07-41f6-9390-339e32c6dc6f","method":"POST","headers":{":authority":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"155cd244-3b07-41f6-9390-339e32c6dc6f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14wzh2NuFgmwGTc8z_mmYEPYHb1mWfYmRV86TIytZTb14zF4cqyaIiFk73cqj"} {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"155cd244-3b07-41f6-9390-339e32c6dc6f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3f12e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14wzh2NuFgmwGTc8z_mmYEPYHb1mWfYmRV86TIytZTb14zF4cqyaIiFk73cqj\"}"} {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"155cd244-3b07-41f6-9390-339e32c6dc6f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3f12e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8b451c23-16b2-4ae1-b20a-e0802ab8828d","keyName":"e2e-sub-iso-9574a7","subscription":"e2e-shared-sub-8c11f8","tenant":"e2e-shared-a-3f12e9","userId":"8b451c23-16b2-4ae1-b20a-e0802ab8828d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"155cd244-3b07-41f6-9390-339e32c6dc6f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"155cd244-3b07-41f6-9390-339e32c6dc6f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"155cd244-3b07-41f6-9390-339e32c6dc6f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"155cd244-3b07-41f6-9390-339e32c6dc6f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3f12e9/sub-test-model-3f12e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3f12e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"155cd244-3b07-41f6-9390-339e32c6dc6f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"155cd244-3b07-41f6-9390-339e32c6dc6f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-8c11f8"} {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"155cd244-3b07-41f6-9390-339e32c6dc6f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"155cd244-3b07-41f6-9390-339e32c6dc6f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"155cd244-3b07-41f6-9390-339e32c6dc6f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"155cd244-3b07-41f6-9390-339e32c6dc6f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89c102e4-fd9b-4b97-843c-c29a3265516c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:41332","PortSpecifier":{"PortValue":41332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"89c102e4-fd9b-4b97-843c-c29a3265516c","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-60de5a.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89c102e4-fd9b-4b97-843c-c29a3265516c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:41332","PortSpecifier":{"PortValue":41332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784833227,"nanos":305832768},"http":{"id":"89c102e4-fd9b-4b97-843c-c29a3265516c","method":"POST","headers":{":authority":"e2e-shared-b-60de5a.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"89c102e4-fd9b-4b97-843c-c29a3265516c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Fe40upslSNu89ImP_BHRoSdvWEr1Ov1K5tnsCKba56arCSulWIvpft1GuF0d"} {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"89c102e4-fd9b-4b97-843c-c29a3265516c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-60de5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Fe40upslSNu89ImP_BHRoSdvWEr1Ov1K5tnsCKba56arCSulWIvpft1GuF0d\"}"} {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"89c102e4-fd9b-4b97-843c-c29a3265516c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-60de5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5b30e7d3-6181-4758-b7fc-5e70b05a6374","keyName":"e2e-sub-iso-bbf140","subscription":"e2e-shared-sub-8c11f8","tenant":"e2e-shared-b-60de5a","userId":"5b30e7d3-6181-4758-b7fc-5e70b05a6374","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"89c102e4-fd9b-4b97-843c-c29a3265516c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89c102e4-fd9b-4b97-843c-c29a3265516c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89c102e4-fd9b-4b97-843c-c29a3265516c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89c102e4-fd9b-4b97-843c-c29a3265516c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-60de5a/sub-test-model-60de5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-60de5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"89c102e4-fd9b-4b97-843c-c29a3265516c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89c102e4-fd9b-4b97-843c-c29a3265516c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89c102e4-fd9b-4b97-843c-c29a3265516c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89c102e4-fd9b-4b97-843c-c29a3265516c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-8c11f8"} {"level":"info","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89c102e4-fd9b-4b97-843c-c29a3265516c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T19:00:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89c102e4-fd9b-4b97-843c-c29a3265516c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T19:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0dd1056b0526220160cb3c32a3ce4918d764ec24e71e7cdf0c772f7c6a02a71d"} {"level":"info","ts":"2026-07-23T19:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df1ac852ca86a4fc22008ca6a260c0b515b17980ad9c6eb1669f04b07f7230a5"} {"level":"info","ts":"2026-07-23T19:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d25e28b0a9b6e1e6dbc609682bac6402d866762a5b153c16369300e780de4425"} {"level":"info","ts":"2026-07-23T19:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b8a3b735f58ac4e1dd9a9be2925a32de51a9f059d1931a7319e66f89952a8c7a"} {"level":"info","ts":"2026-07-23T19:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"} {"level":"info","ts":"2026-07-23T19:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf633ac830b20a1b3ec828afc9b327a60b3d50175db2232fcad037f437942190"} {"level":"info","ts":"2026-07-23T19:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97dea8c68cf77fe0bebde0b7b82066a2262bd3f8833f560ff71c89d14db98cb8"} {"level":"info","ts":"2026-07-23T19:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5a697cac8ffec1d97cff44fddc35e31838a7f537e1df077b9a74418e334d199e"} {"level":"info","ts":"2026-07-23T19:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c16ae9f31626a037ee1a66fcbf51171ca541bf003a73dca53a9cafe2837ce35d"} {"level":"info","ts":"2026-07-23T19:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"} {"level":"info","ts":"2026-07-23T19:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81"} {"level":"info","ts":"2026-07-23T19:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2965d62493a53c6253005929e45fe8f1d4efeca5bb2f31b7f487c60f1a1d69ad"} {"level":"info","ts":"2026-07-23T19:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9997e4257d18694cfa10a211bd7da56ebc322e7fa122b788304fdabfb5dff736"} {"level":"info","ts":"2026-07-23T19:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b28cfae7b9902a1c819ef6b797aee06608bf1318138f9ae4c793da1cc08d283c"} {"level":"info","ts":"2026-07-23T19:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/680d1eaee32f5d0f37f52d5057eb1439590d4b253efe8a70bc2691dbb7c5e445"} {"level":"info","ts":"2026-07-23T19:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b09584547868d2da46fe618c438464b04026a186dd70ad7999652b81efee254"} {"level":"info","ts":"2026-07-23T19:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/136acea8d0d99b571d3a97b0bcaf4068c510507ca271c96188a3f31298ced1d6"} {"level":"info","ts":"2026-07-23T19:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/befd00d906aeed8734261a234b7fe8b1a70c47735f1ac1c544e9a1a9e7bd2039"} {"level":"info","ts":"2026-07-23T19:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c26a3581282c849e57349f16b122d70e56132b3fcd363f7caae59342d3c0134"} {"level":"info","ts":"2026-07-23T19:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f8f5706b26ceb3a3fcc77d81e404fd8324b89d3ce7e60cd36a769c6b53d46b4"} {"level":"info","ts":"2026-07-23T19:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c2e3af08a704270b873e9510c97cf7d9dc59d696821a50c889839d2e2575570"} {"level":"info","ts":"2026-07-23T19:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70255109045fce772961a6996dc00c30d5c75d5a98620a09231660cc68c47d2f"} {"level":"info","ts":"2026-07-23T19:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ba0d3c7281e872711a5a41c0e57b05fa646c667f7174bc952820007550bcf80"} {"level":"info","ts":"2026-07-23T19:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd"} {"level":"debug","ts":"2026-07-23T19:01:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8390b966b63219fcc971320110cd1640fbb899a2816a8e864fcafb7708999aba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:01:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:01:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8390b966b63219fcc971320110cd1640fbb899a2816a8e864fcafb7708999aba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8390b966b63219fcc971320110cd1640fbb899a2816a8e864fcafb7708999aba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:01:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8390b966b63219fcc971320110cd1640fbb899a2816a8e864fcafb7708999aba"} {"level":"debug","ts":"2026-07-23T19:01:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8390b966b63219fcc971320110cd1640fbb899a2816a8e864fcafb7708999aba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8390b966b63219fcc971320110cd1640fbb899a2816a8e864fcafb7708999aba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:01:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8390b966b63219fcc971320110cd1640fbb899a2816a8e864fcafb7708999aba"} {"level":"debug","ts":"2026-07-23T19:01:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8390b966b63219fcc971320110cd1640fbb899a2816a8e864fcafb7708999aba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:01:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:01:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8390b966b63219fcc971320110cd1640fbb899a2816a8e864fcafb7708999aba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8390b966b63219fcc971320110cd1640fbb899a2816a8e864fcafb7708999aba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8390b966b63219fcc971320110cd1640fbb899a2816a8e864fcafb7708999aba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:01:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:01:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8390b966b63219fcc971320110cd1640fbb899a2816a8e864fcafb7708999aba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8390b966b63219fcc971320110cd1640fbb899a2816a8e864fcafb7708999aba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:01:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8390b966b63219fcc971320110cd1640fbb899a2816a8e864fcafb7708999aba"} {"level":"debug","ts":"2026-07-23T19:01:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8390b966b63219fcc971320110cd1640fbb899a2816a8e864fcafb7708999aba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:01:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8390b966b63219fcc971320110cd1640fbb899a2816a8e864fcafb7708999aba"} {"level":"debug","ts":"2026-07-23T19:01:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8390b966b63219fcc971320110cd1640fbb899a2816a8e864fcafb7708999aba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:01:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:01:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8390b966b63219fcc971320110cd1640fbb899a2816a8e864fcafb7708999aba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8390b966b63219fcc971320110cd1640fbb899a2816a8e864fcafb7708999aba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8390b966b63219fcc971320110cd1640fbb899a2816a8e864fcafb7708999aba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:01:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8390b966b63219fcc971320110cd1640fbb899a2816a8e864fcafb7708999aba"} {"level":"debug","ts":"2026-07-23T19:01:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a2ac109e2b0acdff0c377cff4972a6c94eaf5e142fe5f5a8beb43adf7f59444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:01:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:01:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a2ac109e2b0acdff0c377cff4972a6c94eaf5e142fe5f5a8beb43adf7f59444","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a2ac109e2b0acdff0c377cff4972a6c94eaf5e142fe5f5a8beb43adf7f59444","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a2ac109e2b0acdff0c377cff4972a6c94eaf5e142fe5f5a8beb43adf7f59444","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:01:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a2ac109e2b0acdff0c377cff4972a6c94eaf5e142fe5f5a8beb43adf7f59444"} {"level":"debug","ts":"2026-07-23T19:01:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a2ac109e2b0acdff0c377cff4972a6c94eaf5e142fe5f5a8beb43adf7f59444","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:01:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a2ac109e2b0acdff0c377cff4972a6c94eaf5e142fe5f5a8beb43adf7f59444"} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a2ac109e2b0acdff0c377cff4972a6c94eaf5e142fe5f5a8beb43adf7f59444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a2ac109e2b0acdff0c377cff4972a6c94eaf5e142fe5f5a8beb43adf7f59444"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a2ac109e2b0acdff0c377cff4972a6c94eaf5e142fe5f5a8beb43adf7f59444","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a68b4b5e27badba1291ad9a6b42939067d4744662a85596f0bfdd65109d1d7c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a68b4b5e27badba1291ad9a6b42939067d4744662a85596f0bfdd65109d1d7c5"} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a68b4b5e27badba1291ad9a6b42939067d4744662a85596f0bfdd65109d1d7c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a2ac109e2b0acdff0c377cff4972a6c94eaf5e142fe5f5a8beb43adf7f59444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a2ac109e2b0acdff0c377cff4972a6c94eaf5e142fe5f5a8beb43adf7f59444"} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a2ac109e2b0acdff0c377cff4972a6c94eaf5e142fe5f5a8beb43adf7f59444","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a68b4b5e27badba1291ad9a6b42939067d4744662a85596f0bfdd65109d1d7c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a2ac109e2b0acdff0c377cff4972a6c94eaf5e142fe5f5a8beb43adf7f59444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a2ac109e2b0acdff0c377cff4972a6c94eaf5e142fe5f5a8beb43adf7f59444"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a2ac109e2b0acdff0c377cff4972a6c94eaf5e142fe5f5a8beb43adf7f59444","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a68b4b5e27badba1291ad9a6b42939067d4744662a85596f0bfdd65109d1d7c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a2ac109e2b0acdff0c377cff4972a6c94eaf5e142fe5f5a8beb43adf7f59444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a2ac109e2b0acdff0c377cff4972a6c94eaf5e142fe5f5a8beb43adf7f59444"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a68b4b5e27badba1291ad9a6b42939067d4744662a85596f0bfdd65109d1d7c5"} {"level":"error","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2a2ac109e2b0acdff0c377cff4972a6c94eaf5e142fe5f5a8beb43adf7f59444","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2a2ac109e2b0acdff0c377cff4972a6c94eaf5e142fe5f5a8beb43adf7f59444\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a2ac109e2b0acdff0c377cff4972a6c94eaf5e142fe5f5a8beb43adf7f59444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a2ac109e2b0acdff0c377cff4972a6c94eaf5e142fe5f5a8beb43adf7f59444","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a68b4b5e27badba1291ad9a6b42939067d4744662a85596f0bfdd65109d1d7c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a68b4b5e27badba1291ad9a6b42939067d4744662a85596f0bfdd65109d1d7c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a2ac109e2b0acdff0c377cff4972a6c94eaf5e142fe5f5a8beb43adf7f59444"} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a68b4b5e27badba1291ad9a6b42939067d4744662a85596f0bfdd65109d1d7c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a2ac109e2b0acdff0c377cff4972a6c94eaf5e142fe5f5a8beb43adf7f59444","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a68b4b5e27badba1291ad9a6b42939067d4744662a85596f0bfdd65109d1d7c5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a2ac109e2b0acdff0c377cff4972a6c94eaf5e142fe5f5a8beb43adf7f59444"} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a2ac109e2b0acdff0c377cff4972a6c94eaf5e142fe5f5a8beb43adf7f59444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a2ac109e2b0acdff0c377cff4972a6c94eaf5e142fe5f5a8beb43adf7f59444"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a68b4b5e27badba1291ad9a6b42939067d4744662a85596f0bfdd65109d1d7c5"} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a2ac109e2b0acdff0c377cff4972a6c94eaf5e142fe5f5a8beb43adf7f59444","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a2ac109e2b0acdff0c377cff4972a6c94eaf5e142fe5f5a8beb43adf7f59444","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a2ac109e2b0acdff0c377cff4972a6c94eaf5e142fe5f5a8beb43adf7f59444"} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ec06140b12ba14db7461bb84f6a7180945ac9cec10a9bd75f6854cbdf1bcde9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ec06140b12ba14db7461bb84f6a7180945ac9cec10a9bd75f6854cbdf1bcde9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ec06140b12ba14db7461bb84f6a7180945ac9cec10a9bd75f6854cbdf1bcde9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ec06140b12ba14db7461bb84f6a7180945ac9cec10a9bd75f6854cbdf1bcde9"} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ec06140b12ba14db7461bb84f6a7180945ac9cec10a9bd75f6854cbdf1bcde9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ec06140b12ba14db7461bb84f6a7180945ac9cec10a9bd75f6854cbdf1bcde9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ec06140b12ba14db7461bb84f6a7180945ac9cec10a9bd75f6854cbdf1bcde9"} {"level":"error","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7ec06140b12ba14db7461bb84f6a7180945ac9cec10a9bd75f6854cbdf1bcde9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7ec06140b12ba14db7461bb84f6a7180945ac9cec10a9bd75f6854cbdf1bcde9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ec06140b12ba14db7461bb84f6a7180945ac9cec10a9bd75f6854cbdf1bcde9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ec06140b12ba14db7461bb84f6a7180945ac9cec10a9bd75f6854cbdf1bcde9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ec06140b12ba14db7461bb84f6a7180945ac9cec10a9bd75f6854cbdf1bcde9"} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f836c35299bb1210718b2a60c1921e7762081ec69da642a16cd0ed02225bff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f836c35299bb1210718b2a60c1921e7762081ec69da642a16cd0ed02225bff5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f836c35299bb1210718b2a60c1921e7762081ec69da642a16cd0ed02225bff5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ec06140b12ba14db7461bb84f6a7180945ac9cec10a9bd75f6854cbdf1bcde9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ec06140b12ba14db7461bb84f6a7180945ac9cec10a9bd75f6854cbdf1bcde9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f836c35299bb1210718b2a60c1921e7762081ec69da642a16cd0ed02225bff5"} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ec06140b12ba14db7461bb84f6a7180945ac9cec10a9bd75f6854cbdf1bcde9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f836c35299bb1210718b2a60c1921e7762081ec69da642a16cd0ed02225bff5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ec06140b12ba14db7461bb84f6a7180945ac9cec10a9bd75f6854cbdf1bcde9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f836c35299bb1210718b2a60c1921e7762081ec69da642a16cd0ed02225bff5"} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f836c35299bb1210718b2a60c1921e7762081ec69da642a16cd0ed02225bff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f836c35299bb1210718b2a60c1921e7762081ec69da642a16cd0ed02225bff5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ec06140b12ba14db7461bb84f6a7180945ac9cec10a9bd75f6854cbdf1bcde9"} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f836c35299bb1210718b2a60c1921e7762081ec69da642a16cd0ed02225bff5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f836c35299bb1210718b2a60c1921e7762081ec69da642a16cd0ed02225bff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f836c35299bb1210718b2a60c1921e7762081ec69da642a16cd0ed02225bff5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f836c35299bb1210718b2a60c1921e7762081ec69da642a16cd0ed02225bff5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f836c35299bb1210718b2a60c1921e7762081ec69da642a16cd0ed02225bff5"} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f836c35299bb1210718b2a60c1921e7762081ec69da642a16cd0ed02225bff5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f836c35299bb1210718b2a60c1921e7762081ec69da642a16cd0ed02225bff5"} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f836c35299bb1210718b2a60c1921e7762081ec69da642a16cd0ed02225bff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f836c35299bb1210718b2a60c1921e7762081ec69da642a16cd0ed02225bff5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f836c35299bb1210718b2a60c1921e7762081ec69da642a16cd0ed02225bff5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f836c35299bb1210718b2a60c1921e7762081ec69da642a16cd0ed02225bff5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f836c35299bb1210718b2a60c1921e7762081ec69da642a16cd0ed02225bff5"} {"level":"error","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"} {"level":"error","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ba0d3c7281e872711a5a41c0e57b05fa646c667f7174bc952820007550bcf80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ba0d3c7281e872711a5a41c0e57b05fa646c667f7174bc952820007550bcf80"} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ba0d3c7281e872711a5a41c0e57b05fa646c667f7174bc952820007550bcf80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ba0d3c7281e872711a5a41c0e57b05fa646c667f7174bc952820007550bcf80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ba0d3c7281e872711a5a41c0e57b05fa646c667f7174bc952820007550bcf80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ba0d3c7281e872711a5a41c0e57b05fa646c667f7174bc952820007550bcf80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ba0d3c7281e872711a5a41c0e57b05fa646c667f7174bc952820007550bcf80"} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ba0d3c7281e872711a5a41c0e57b05fa646c667f7174bc952820007550bcf80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ba0d3c7281e872711a5a41c0e57b05fa646c667f7174bc952820007550bcf80"} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c2e3af08a704270b873e9510c97cf7d9dc59d696821a50c889839d2e2575570","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c2e3af08a704270b873e9510c97cf7d9dc59d696821a50c889839d2e2575570","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c2e3af08a704270b873e9510c97cf7d9dc59d696821a50c889839d2e2575570","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c2e3af08a704270b873e9510c97cf7d9dc59d696821a50c889839d2e2575570","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c2e3af08a704270b873e9510c97cf7d9dc59d696821a50c889839d2e2575570","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c2e3af08a704270b873e9510c97cf7d9dc59d696821a50c889839d2e2575570"} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c2e3af08a704270b873e9510c97cf7d9dc59d696821a50c889839d2e2575570","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c2e3af08a704270b873e9510c97cf7d9dc59d696821a50c889839d2e2575570","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a502f4d2c532a48816f31dcf90ff5b72deac59341effbb0cf803be09343c540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c2e3af08a704270b873e9510c97cf7d9dc59d696821a50c889839d2e2575570"} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a502f4d2c532a48816f31dcf90ff5b72deac59341effbb0cf803be09343c540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a502f4d2c532a48816f31dcf90ff5b72deac59341effbb0cf803be09343c540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a502f4d2c532a48816f31dcf90ff5b72deac59341effbb0cf803be09343c540"} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a502f4d2c532a48816f31dcf90ff5b72deac59341effbb0cf803be09343c540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c2e3af08a704270b873e9510c97cf7d9dc59d696821a50c889839d2e2575570","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c2e3af08a704270b873e9510c97cf7d9dc59d696821a50c889839d2e2575570"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c2e3af08a704270b873e9510c97cf7d9dc59d696821a50c889839d2e2575570","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a502f4d2c532a48816f31dcf90ff5b72deac59341effbb0cf803be09343c540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c2e3af08a704270b873e9510c97cf7d9dc59d696821a50c889839d2e2575570","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a502f4d2c532a48816f31dcf90ff5b72deac59341effbb0cf803be09343c540"} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54a61ae7e454cf4c0265c48a81cbea1be3d584c958c9cffc05c639389d21137a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54a61ae7e454cf4c0265c48a81cbea1be3d584c958c9cffc05c639389d21137a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a502f4d2c532a48816f31dcf90ff5b72deac59341effbb0cf803be09343c540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a502f4d2c532a48816f31dcf90ff5b72deac59341effbb0cf803be09343c540"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c2e3af08a704270b873e9510c97cf7d9dc59d696821a50c889839d2e2575570"} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a502f4d2c532a48816f31dcf90ff5b72deac59341effbb0cf803be09343c540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cf1cff681afbb118951d4b7af9d5961fd83df41b4e483d056c722b5c2fbf4b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54a61ae7e454cf4c0265c48a81cbea1be3d584c958c9cffc05c639389d21137a"} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cf1cff681afbb118951d4b7af9d5961fd83df41b4e483d056c722b5c2fbf4b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54a61ae7e454cf4c0265c48a81cbea1be3d584c958c9cffc05c639389d21137a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54a61ae7e454cf4c0265c48a81cbea1be3d584c958c9cffc05c639389d21137a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cf1cff681afbb118951d4b7af9d5961fd83df41b4e483d056c722b5c2fbf4b1"} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54a61ae7e454cf4c0265c48a81cbea1be3d584c958c9cffc05c639389d21137a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a502f4d2c532a48816f31dcf90ff5b72deac59341effbb0cf803be09343c540"} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a502f4d2c532a48816f31dcf90ff5b72deac59341effbb0cf803be09343c540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cf1cff681afbb118951d4b7af9d5961fd83df41b4e483d056c722b5c2fbf4b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:01:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cf1cff681afbb118951d4b7af9d5961fd83df41b4e483d056c722b5c2fbf4b1"} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cf1cff681afbb118951d4b7af9d5961fd83df41b4e483d056c722b5c2fbf4b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54a61ae7e454cf4c0265c48a81cbea1be3d584c958c9cffc05c639389d21137a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54a61ae7e454cf4c0265c48a81cbea1be3d584c958c9cffc05c639389d21137a"} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54a61ae7e454cf4c0265c48a81cbea1be3d584c958c9cffc05c639389d21137a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8a3b735f58ac4e1dd9a9be2925a32de51a9f059d1931a7319e66f89952a8c7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8a3b735f58ac4e1dd9a9be2925a32de51a9f059d1931a7319e66f89952a8c7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8a3b735f58ac4e1dd9a9be2925a32de51a9f059d1931a7319e66f89952a8c7a"} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cf1cff681afbb118951d4b7af9d5961fd83df41b4e483d056c722b5c2fbf4b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cf1cff681afbb118951d4b7af9d5961fd83df41b4e483d056c722b5c2fbf4b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cf1cff681afbb118951d4b7af9d5961fd83df41b4e483d056c722b5c2fbf4b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0882fe6435b711ce01ab4b22f43377762d1fd0a3cbced48803039ec7162bdc10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cf1cff681afbb118951d4b7af9d5961fd83df41b4e483d056c722b5c2fbf4b1"} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0882fe6435b711ce01ab4b22f43377762d1fd0a3cbced48803039ec7162bdc10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54a61ae7e454cf4c0265c48a81cbea1be3d584c958c9cffc05c639389d21137a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54a61ae7e454cf4c0265c48a81cbea1be3d584c958c9cffc05c639389d21137a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0882fe6435b711ce01ab4b22f43377762d1fd0a3cbced48803039ec7162bdc10"} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54a61ae7e454cf4c0265c48a81cbea1be3d584c958c9cffc05c639389d21137a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f8f5706b26ceb3a3fcc77d81e404fd8324b89d3ce7e60cd36a769c6b53d46b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54a61ae7e454cf4c0265c48a81cbea1be3d584c958c9cffc05c639389d21137a"} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f8f5706b26ceb3a3fcc77d81e404fd8324b89d3ce7e60cd36a769c6b53d46b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8a3b735f58ac4e1dd9a9be2925a32de51a9f059d1931a7319e66f89952a8c7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8a3b735f58ac4e1dd9a9be2925a32de51a9f059d1931a7319e66f89952a8c7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f8f5706b26ceb3a3fcc77d81e404fd8324b89d3ce7e60cd36a769c6b53d46b4"} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8a3b735f58ac4e1dd9a9be2925a32de51a9f059d1931a7319e66f89952a8c7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cf1cff681afbb118951d4b7af9d5961fd83df41b4e483d056c722b5c2fbf4b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0882fe6435b711ce01ab4b22f43377762d1fd0a3cbced48803039ec7162bdc10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0882fe6435b711ce01ab4b22f43377762d1fd0a3cbced48803039ec7162bdc10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8a3b735f58ac4e1dd9a9be2925a32de51a9f059d1931a7319e66f89952a8c7a"} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0882fe6435b711ce01ab4b22f43377762d1fd0a3cbced48803039ec7162bdc10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80803bb035cb46e96f85330d823c5b4a51d899681433a069944248befee15f63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cf1cff681afbb118951d4b7af9d5961fd83df41b4e483d056c722b5c2fbf4b1"} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80803bb035cb46e96f85330d823c5b4a51d899681433a069944248befee15f63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54a61ae7e454cf4c0265c48a81cbea1be3d584c958c9cffc05c639389d21137a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f8f5706b26ceb3a3fcc77d81e404fd8324b89d3ce7e60cd36a769c6b53d46b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f8f5706b26ceb3a3fcc77d81e404fd8324b89d3ce7e60cd36a769c6b53d46b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0882fe6435b711ce01ab4b22f43377762d1fd0a3cbced48803039ec7162bdc10"} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f8f5706b26ceb3a3fcc77d81e404fd8324b89d3ce7e60cd36a769c6b53d46b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b6af7041eca9448ff67e45c677c131cd6969e1866deb062170055ce301a32fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80803bb035cb46e96f85330d823c5b4a51d899681433a069944248befee15f63"} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54a61ae7e454cf4c0265c48a81cbea1be3d584c958c9cffc05c639389d21137a"} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81"} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b6af7041eca9448ff67e45c677c131cd6969e1866deb062170055ce301a32fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8a3b735f58ac4e1dd9a9be2925a32de51a9f059d1931a7319e66f89952a8c7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88ad0057a7c40baaa2268661ac025caac926ffa70f1c8d3fcd7e26a02f66fa98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f8f5706b26ceb3a3fcc77d81e404fd8324b89d3ce7e60cd36a769c6b53d46b4"} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b6af7041eca9448ff67e45c677c131cd6969e1866deb062170055ce301a32fe"} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88ad0057a7c40baaa2268661ac025caac926ffa70f1c8d3fcd7e26a02f66fa98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0882fe6435b711ce01ab4b22f43377762d1fd0a3cbced48803039ec7162bdc10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80803bb035cb46e96f85330d823c5b4a51d899681433a069944248befee15f63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80803bb035cb46e96f85330d823c5b4a51d899681433a069944248befee15f63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88ad0057a7c40baaa2268661ac025caac926ffa70f1c8d3fcd7e26a02f66fa98"} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8a3b735f58ac4e1dd9a9be2925a32de51a9f059d1931a7319e66f89952a8c7a"} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d84c98c837f80ac8b5cee410b7bf1346da95823cf8b4ee369680f8f0f6aca459"} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80803bb035cb46e96f85330d823c5b4a51d899681433a069944248befee15f63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d84c98c837f80ac8b5cee410b7bf1346da95823cf8b4ee369680f8f0f6aca459","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d84c98c837f80ac8b5cee410b7bf1346da95823cf8b4ee369680f8f0f6aca459"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4420a19de273354b4ee8d6bcc5dd007ac6dcb051e042a4d9ca110ccd77a109"} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d84c98c837f80ac8b5cee410b7bf1346da95823cf8b4ee369680f8f0f6aca459","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd"} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7703de1a0678473a3239ba24ee6bd51bc7cd63572cab0843f6f781646d45006"} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01dc86bce200c3a547d599fb3876fb880af8bf899c109377ca4884906a2b6cf9"} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88ad0057a7c40baaa2268661ac025caac926ffa70f1c8d3fcd7e26a02f66fa98"} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80803bb035cb46e96f85330d823c5b4a51d899681433a069944248befee15f63"} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f8f5706b26ceb3a3fcc77d81e404fd8324b89d3ce7e60cd36a769c6b53d46b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4420a19de273354b4ee8d6bcc5dd007ac6dcb051e042a4d9ca110ccd77a109","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd4420a19de273354b4ee8d6bcc5dd007ac6dcb051e042a4d9ca110ccd77a109"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d84c98c837f80ac8b5cee410b7bf1346da95823cf8b4ee369680f8f0f6aca459"} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81"} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4420a19de273354b4ee8d6bcc5dd007ac6dcb051e042a4d9ca110ccd77a109","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7703de1a0678473a3239ba24ee6bd51bc7cd63572cab0843f6f781646d45006","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7703de1a0678473a3239ba24ee6bd51bc7cd63572cab0843f6f781646d45006"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4420a19de273354b4ee8d6bcc5dd007ac6dcb051e042a4d9ca110ccd77a109"} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd"} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7703de1a0678473a3239ba24ee6bd51bc7cd63572cab0843f6f781646d45006","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b6af7041eca9448ff67e45c677c131cd6969e1866deb062170055ce301a32fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b6af7041eca9448ff67e45c677c131cd6969e1866deb062170055ce301a32fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7703de1a0678473a3239ba24ee6bd51bc7cd63572cab0843f6f781646d45006"} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b6af7041eca9448ff67e45c677c131cd6969e1866deb062170055ce301a32fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01dc86bce200c3a547d599fb3876fb880af8bf899c109377ca4884906a2b6cf9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01dc86bce200c3a547d599fb3876fb880af8bf899c109377ca4884906a2b6cf9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b6af7041eca9448ff67e45c677c131cd6969e1866deb062170055ce301a32fe"} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01dc86bce200c3a547d599fb3876fb880af8bf899c109377ca4884906a2b6cf9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88ad0057a7c40baaa2268661ac025caac926ffa70f1c8d3fcd7e26a02f66fa98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88ad0057a7c40baaa2268661ac025caac926ffa70f1c8d3fcd7e26a02f66fa98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01dc86bce200c3a547d599fb3876fb880af8bf899c109377ca4884906a2b6cf9"} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88ad0057a7c40baaa2268661ac025caac926ffa70f1c8d3fcd7e26a02f66fa98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80803bb035cb46e96f85330d823c5b4a51d899681433a069944248befee15f63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d84c98c837f80ac8b5cee410b7bf1346da95823cf8b4ee369680f8f0f6aca459","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd4420a19de273354b4ee8d6bcc5dd007ac6dcb051e042a4d9ca110ccd77a109","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7703de1a0678473a3239ba24ee6bd51bc7cd63572cab0843f6f781646d45006","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b6af7041eca9448ff67e45c677c131cd6969e1866deb062170055ce301a32fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01dc86bce200c3a547d599fb3876fb880af8bf899c109377ca4884906a2b6cf9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88ad0057a7c40baaa2268661ac025caac926ffa70f1c8d3fcd7e26a02f66fa98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88ad0057a7c40baaa2268661ac025caac926ffa70f1c8d3fcd7e26a02f66fa98"} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88ad0057a7c40baaa2268661ac025caac926ffa70f1c8d3fcd7e26a02f66fa98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88ad0057a7c40baaa2268661ac025caac926ffa70f1c8d3fcd7e26a02f66fa98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88ad0057a7c40baaa2268661ac025caac926ffa70f1c8d3fcd7e26a02f66fa98","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88ad0057a7c40baaa2268661ac025caac926ffa70f1c8d3fcd7e26a02f66fa98"} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88ad0057a7c40baaa2268661ac025caac926ffa70f1c8d3fcd7e26a02f66fa98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88ad0057a7c40baaa2268661ac025caac926ffa70f1c8d3fcd7e26a02f66fa98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88ad0057a7c40baaa2268661ac025caac926ffa70f1c8d3fcd7e26a02f66fa98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88ad0057a7c40baaa2268661ac025caac926ffa70f1c8d3fcd7e26a02f66fa98","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88ad0057a7c40baaa2268661ac025caac926ffa70f1c8d3fcd7e26a02f66fa98"} {"level":"info","ts":"2026-07-23T19:01:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"266307cf-3609-47ad-9af8-fe8881c84685","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:43138","PortSpecifier":{"PortValue":43138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"266307cf-3609-47ad-9af8-fe8881c84685","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T19:01:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"266307cf-3609-47ad-9af8-fe8881c84685","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:43138","PortSpecifier":{"PortValue":43138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784833288,"nanos":961735830},"http":{"id":"266307cf-3609-47ad-9af8-fe8881c84685","method":"POST","headers":{":authority":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:01:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"266307cf-3609-47ad-9af8-fe8881c84685","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T19:01:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"266307cf-3609-47ad-9af8-fe8881c84685","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbcb4750-d409-4f27-b34b-22cf6c2c21ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ea996b7d-8676-4409-a79d-af2a84ac29b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ae2263ba428"]}} {"level":"debug","ts":"2026-07-23T19:01:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"266307cf-3609-47ad-9af8-fe8881c84685","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ae2263ba428"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ea996b7d-8676-4409-a79d-af2a84ac29b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbcb4750-d409-4f27-b34b-22cf6c2c21ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b8a3b735f58ac4e1dd9a9be2925a32de51a9f059d1931a7319e66f89952a8c7a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:01:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"266307cf-3609-47ad-9af8-fe8881c84685","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:01:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"266307cf-3609-47ad-9af8-fe8881c84685","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:01:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"266307cf-3609-47ad-9af8-fe8881c84685","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3f12e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:01:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"266307cf-3609-47ad-9af8-fe8881c84685","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T19:01:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"266307cf-3609-47ad-9af8-fe8881c84685","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T19:01:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"266307cf-3609-47ad-9af8-fe8881c84685","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T19:01:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"266307cf-3609-47ad-9af8-fe8881c84685","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T19:01:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"266307cf-3609-47ad-9af8-fe8881c84685","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T19:01:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e1d3009-0cc9-4846-952c-6cc9d0ba7aff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:45674","PortSpecifier":{"PortValue":45674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2e1d3009-0cc9-4846-952c-6cc9d0ba7aff","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-60de5a.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T19:01:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e1d3009-0cc9-4846-952c-6cc9d0ba7aff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:45674","PortSpecifier":{"PortValue":45674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784833288,"nanos":999255086},"http":{"id":"2e1d3009-0cc9-4846-952c-6cc9d0ba7aff","method":"POST","headers":{":authority":"e2e-shared-b-60de5a.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:01:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2e1d3009-0cc9-4846-952c-6cc9d0ba7aff","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T19:01:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2e1d3009-0cc9-4846-952c-6cc9d0ba7aff","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbcb4750-d409-4f27-b34b-22cf6c2c21ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ea996b7d-8676-4409-a79d-af2a84ac29b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ae2263ba428"]}} {"level":"debug","ts":"2026-07-23T19:01:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2e1d3009-0cc9-4846-952c-6cc9d0ba7aff","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ae2263ba428"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ea996b7d-8676-4409-a79d-af2a84ac29b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbcb4750-d409-4f27-b34b-22cf6c2c21ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-60de5a.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:01:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e1d3009-0cc9-4846-952c-6cc9d0ba7aff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:01:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e1d3009-0cc9-4846-952c-6cc9d0ba7aff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:01:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e1d3009-0cc9-4846-952c-6cc9d0ba7aff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-60de5a/rate-test-model-60de5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-60de5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:01:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2e1d3009-0cc9-4846-952c-6cc9d0ba7aff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T19:01:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e1d3009-0cc9-4846-952c-6cc9d0ba7aff","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T19:01:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e1d3009-0cc9-4846-952c-6cc9d0ba7aff","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T19:01:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e1d3009-0cc9-4846-952c-6cc9d0ba7aff","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T19:01:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e1d3009-0cc9-4846-952c-6cc9d0ba7aff","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T19:01:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23c75b3d-d5f1-4eff-b5d2-9c7db4188b6c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:43146","PortSpecifier":{"PortValue":43146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"23c75b3d-d5f1-4eff-b5d2-9c7db4188b6c","method":"POST","path":"/ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9/v1/completions","host":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T19:01:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23c75b3d-d5f1-4eff-b5d2-9c7db4188b6c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:43146","PortSpecifier":{"PortValue":43146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784833289,"nanos":33853532},"http":{"id":"23c75b3d-d5f1-4eff-b5d2-9c7db4188b6c","method":"POST","headers":{":authority":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:01:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"23c75b3d-d5f1-4eff-b5d2-9c7db4188b6c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KCrO99NiJ9eglYPt_PhEJLOVUoyMCB2IiBURwvrSu5L4HEDQ7xIlwxR8shtL"} {"level":"debug","ts":"2026-07-23T19:01:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"23c75b3d-d5f1-4eff-b5d2-9c7db4188b6c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3f12e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KCrO99NiJ9eglYPt_PhEJLOVUoyMCB2IiBURwvrSu5L4HEDQ7xIlwxR8shtL\"}"} {"level":"debug","ts":"2026-07-23T19:01:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"23c75b3d-d5f1-4eff-b5d2-9c7db4188b6c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3f12e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"63859157-7c4d-4d47-a636-e253f3a4b394","keyName":"e2e-rate-a-941722","subscription":"e2e-rate-iso-a-941722","tenant":"e2e-shared-a-3f12e9","userId":"63859157-7c4d-4d47-a636-e253f3a4b394","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T19:01:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"23c75b3d-d5f1-4eff-b5d2-9c7db4188b6c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3f12e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9\",\"requestedSubscription\":\"e2e-rate-iso-a-941722\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T19:01:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"23c75b3d-d5f1-4eff-b5d2-9c7db4188b6c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3f12e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3f12e9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-941722","namespace":"ai-tenant-e2e-shared-a-3f12e9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9"}} {"level":"debug","ts":"2026-07-23T19:01:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"23c75b3d-d5f1-4eff-b5d2-9c7db4188b6c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:01:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23c75b3d-d5f1-4eff-b5d2-9c7db4188b6c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:01:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23c75b3d-d5f1-4eff-b5d2-9c7db4188b6c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:01:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23c75b3d-d5f1-4eff-b5d2-9c7db4188b6c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3f12e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:01:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23c75b3d-d5f1-4eff-b5d2-9c7db4188b6c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:01:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23c75b3d-d5f1-4eff-b5d2-9c7db4188b6c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-941722"} {"level":"debug","ts":"2026-07-23T19:01:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23c75b3d-d5f1-4eff-b5d2-9c7db4188b6c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T19:01:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23c75b3d-d5f1-4eff-b5d2-9c7db4188b6c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T19:01:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23c75b3d-d5f1-4eff-b5d2-9c7db4188b6c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"63859157-7c4d-4d47-a636-e253f3a4b394","keyName":"e2e-rate-a-941722","selected_subscription":"e2e-rate-iso-a-941722","selected_subscription_key":"ai-tenant-e2e-shared-a-3f12e9/e2e-rate-iso-a-941722@ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3f12e9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-941722","namespace":"ai-tenant-e2e-shared-a-3f12e9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T19:01:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23c75b3d-d5f1-4eff-b5d2-9c7db4188b6c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T19:01:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23c75b3d-d5f1-4eff-b5d2-9c7db4188b6c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T19:01:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1f49a4c-2d4e-4ac6-a762-98d3b9c97524","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:43152","PortSpecifier":{"PortValue":43152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a1f49a4c-2d4e-4ac6-a762-98d3b9c97524","method":"POST","path":"/ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9/v1/completions","host":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T19:01:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1f49a4c-2d4e-4ac6-a762-98d3b9c97524","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:43152","PortSpecifier":{"PortValue":43152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784833290,"nanos":89619546},"http":{"id":"a1f49a4c-2d4e-4ac6-a762-98d3b9c97524","method":"POST","headers":{":authority":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:01:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a1f49a4c-2d4e-4ac6-a762-98d3b9c97524","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KCrO99NiJ9eglYPt_PhEJLOVUoyMCB2IiBURwvrSu5L4HEDQ7xIlwxR8shtL"} {"level":"debug","ts":"2026-07-23T19:01:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a1f49a4c-2d4e-4ac6-a762-98d3b9c97524","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3f12e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KCrO99NiJ9eglYPt_PhEJLOVUoyMCB2IiBURwvrSu5L4HEDQ7xIlwxR8shtL\"}"} {"level":"debug","ts":"2026-07-23T19:01:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a1f49a4c-2d4e-4ac6-a762-98d3b9c97524","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3f12e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"63859157-7c4d-4d47-a636-e253f3a4b394","keyName":"e2e-rate-a-941722","subscription":"e2e-rate-iso-a-941722","tenant":"e2e-shared-a-3f12e9","userId":"63859157-7c4d-4d47-a636-e253f3a4b394","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T19:01:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a1f49a4c-2d4e-4ac6-a762-98d3b9c97524","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3f12e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9\",\"requestedSubscription\":\"e2e-rate-iso-a-941722\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T19:01:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a1f49a4c-2d4e-4ac6-a762-98d3b9c97524","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3f12e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3f12e9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-941722","namespace":"ai-tenant-e2e-shared-a-3f12e9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9"}} {"level":"debug","ts":"2026-07-23T19:01:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a1f49a4c-2d4e-4ac6-a762-98d3b9c97524","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:01:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1f49a4c-2d4e-4ac6-a762-98d3b9c97524","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:01:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1f49a4c-2d4e-4ac6-a762-98d3b9c97524","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:01:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1f49a4c-2d4e-4ac6-a762-98d3b9c97524","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3f12e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:01:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1f49a4c-2d4e-4ac6-a762-98d3b9c97524","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:01:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1f49a4c-2d4e-4ac6-a762-98d3b9c97524","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T19:01:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1f49a4c-2d4e-4ac6-a762-98d3b9c97524","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-941722"} {"level":"debug","ts":"2026-07-23T19:01:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1f49a4c-2d4e-4ac6-a762-98d3b9c97524","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T19:01:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1f49a4c-2d4e-4ac6-a762-98d3b9c97524","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"63859157-7c4d-4d47-a636-e253f3a4b394","keyName":"e2e-rate-a-941722","selected_subscription":"e2e-rate-iso-a-941722","selected_subscription_key":"ai-tenant-e2e-shared-a-3f12e9/e2e-rate-iso-a-941722@ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3f12e9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-941722","namespace":"ai-tenant-e2e-shared-a-3f12e9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T19:01:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1f49a4c-2d4e-4ac6-a762-98d3b9c97524","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T19:01:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1f49a4c-2d4e-4ac6-a762-98d3b9c97524","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T19:01:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65d4c2d0-74b8-4c2c-bcdb-e685320a5760","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:43164","PortSpecifier":{"PortValue":43164}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"65d4c2d0-74b8-4c2c-bcdb-e685320a5760","method":"POST","path":"/ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9/v1/completions","host":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T19:01:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65d4c2d0-74b8-4c2c-bcdb-e685320a5760","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:43164","PortSpecifier":{"PortValue":43164}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784833291,"nanos":124964528},"http":{"id":"65d4c2d0-74b8-4c2c-bcdb-e685320a5760","method":"POST","headers":{":authority":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:01:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"65d4c2d0-74b8-4c2c-bcdb-e685320a5760","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KCrO99NiJ9eglYPt_PhEJLOVUoyMCB2IiBURwvrSu5L4HEDQ7xIlwxR8shtL"} {"level":"debug","ts":"2026-07-23T19:01:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"65d4c2d0-74b8-4c2c-bcdb-e685320a5760","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3f12e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KCrO99NiJ9eglYPt_PhEJLOVUoyMCB2IiBURwvrSu5L4HEDQ7xIlwxR8shtL\"}"} {"level":"debug","ts":"2026-07-23T19:01:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"65d4c2d0-74b8-4c2c-bcdb-e685320a5760","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3f12e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"63859157-7c4d-4d47-a636-e253f3a4b394","keyName":"e2e-rate-a-941722","subscription":"e2e-rate-iso-a-941722","tenant":"e2e-shared-a-3f12e9","userId":"63859157-7c4d-4d47-a636-e253f3a4b394","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T19:01:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"65d4c2d0-74b8-4c2c-bcdb-e685320a5760","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3f12e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9\",\"requestedSubscription\":\"e2e-rate-iso-a-941722\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T19:01:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"65d4c2d0-74b8-4c2c-bcdb-e685320a5760","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3f12e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3f12e9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-941722","namespace":"ai-tenant-e2e-shared-a-3f12e9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9"}} {"level":"debug","ts":"2026-07-23T19:01:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"65d4c2d0-74b8-4c2c-bcdb-e685320a5760","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:01:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65d4c2d0-74b8-4c2c-bcdb-e685320a5760","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:01:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65d4c2d0-74b8-4c2c-bcdb-e685320a5760","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:01:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65d4c2d0-74b8-4c2c-bcdb-e685320a5760","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3f12e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:01:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65d4c2d0-74b8-4c2c-bcdb-e685320a5760","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:01:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65d4c2d0-74b8-4c2c-bcdb-e685320a5760","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T19:01:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65d4c2d0-74b8-4c2c-bcdb-e685320a5760","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-941722"} {"level":"debug","ts":"2026-07-23T19:01:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65d4c2d0-74b8-4c2c-bcdb-e685320a5760","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T19:01:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65d4c2d0-74b8-4c2c-bcdb-e685320a5760","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"63859157-7c4d-4d47-a636-e253f3a4b394","keyName":"e2e-rate-a-941722","selected_subscription":"e2e-rate-iso-a-941722","selected_subscription_key":"ai-tenant-e2e-shared-a-3f12e9/e2e-rate-iso-a-941722@ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3f12e9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-941722","namespace":"ai-tenant-e2e-shared-a-3f12e9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T19:01:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65d4c2d0-74b8-4c2c-bcdb-e685320a5760","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T19:01:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65d4c2d0-74b8-4c2c-bcdb-e685320a5760","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T19:01:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"434b20d7-d520-45e7-9a29-8a3e0e935121","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:50984","PortSpecifier":{"PortValue":50984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"434b20d7-d520-45e7-9a29-8a3e0e935121","method":"POST","path":"/ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9/v1/completions","host":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T19:01:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"434b20d7-d520-45e7-9a29-8a3e0e935121","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:50984","PortSpecifier":{"PortValue":50984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784833292,"nanos":173240484},"http":{"id":"434b20d7-d520-45e7-9a29-8a3e0e935121","method":"POST","headers":{":authority":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:01:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"434b20d7-d520-45e7-9a29-8a3e0e935121","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KCrO99NiJ9eglYPt_PhEJLOVUoyMCB2IiBURwvrSu5L4HEDQ7xIlwxR8shtL"} {"level":"debug","ts":"2026-07-23T19:01:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"434b20d7-d520-45e7-9a29-8a3e0e935121","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3f12e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KCrO99NiJ9eglYPt_PhEJLOVUoyMCB2IiBURwvrSu5L4HEDQ7xIlwxR8shtL\"}"} {"level":"debug","ts":"2026-07-23T19:01:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"434b20d7-d520-45e7-9a29-8a3e0e935121","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3f12e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"63859157-7c4d-4d47-a636-e253f3a4b394","keyName":"e2e-rate-a-941722","subscription":"e2e-rate-iso-a-941722","tenant":"e2e-shared-a-3f12e9","userId":"63859157-7c4d-4d47-a636-e253f3a4b394","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T19:01:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"434b20d7-d520-45e7-9a29-8a3e0e935121","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3f12e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9\",\"requestedSubscription\":\"e2e-rate-iso-a-941722\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T19:01:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"434b20d7-d520-45e7-9a29-8a3e0e935121","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3f12e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3f12e9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-941722","namespace":"ai-tenant-e2e-shared-a-3f12e9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9"}} {"level":"debug","ts":"2026-07-23T19:01:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"434b20d7-d520-45e7-9a29-8a3e0e935121","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:01:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"434b20d7-d520-45e7-9a29-8a3e0e935121","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:01:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"434b20d7-d520-45e7-9a29-8a3e0e935121","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:01:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"434b20d7-d520-45e7-9a29-8a3e0e935121","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3f12e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:01:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"434b20d7-d520-45e7-9a29-8a3e0e935121","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:01:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"434b20d7-d520-45e7-9a29-8a3e0e935121","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T19:01:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"434b20d7-d520-45e7-9a29-8a3e0e935121","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T19:01:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"434b20d7-d520-45e7-9a29-8a3e0e935121","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-941722"} {"level":"debug","ts":"2026-07-23T19:01:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"434b20d7-d520-45e7-9a29-8a3e0e935121","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"63859157-7c4d-4d47-a636-e253f3a4b394","keyName":"e2e-rate-a-941722","selected_subscription":"e2e-rate-iso-a-941722","selected_subscription_key":"ai-tenant-e2e-shared-a-3f12e9/e2e-rate-iso-a-941722@ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3f12e9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-941722","namespace":"ai-tenant-e2e-shared-a-3f12e9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T19:01:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"434b20d7-d520-45e7-9a29-8a3e0e935121","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T19:01:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"434b20d7-d520-45e7-9a29-8a3e0e935121","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T19:01:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad6e6d2f-5c85-4ded-959e-cd1abe5940fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:50986","PortSpecifier":{"PortValue":50986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ad6e6d2f-5c85-4ded-959e-cd1abe5940fd","method":"POST","path":"/ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9/v1/completions","host":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T19:01:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad6e6d2f-5c85-4ded-959e-cd1abe5940fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:50986","PortSpecifier":{"PortValue":50986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784833293,"nanos":209084590},"http":{"id":"ad6e6d2f-5c85-4ded-959e-cd1abe5940fd","method":"POST","headers":{":authority":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:01:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ad6e6d2f-5c85-4ded-959e-cd1abe5940fd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KCrO99NiJ9eglYPt_PhEJLOVUoyMCB2IiBURwvrSu5L4HEDQ7xIlwxR8shtL"} {"level":"debug","ts":"2026-07-23T19:01:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ad6e6d2f-5c85-4ded-959e-cd1abe5940fd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3f12e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KCrO99NiJ9eglYPt_PhEJLOVUoyMCB2IiBURwvrSu5L4HEDQ7xIlwxR8shtL\"}"} {"level":"debug","ts":"2026-07-23T19:01:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ad6e6d2f-5c85-4ded-959e-cd1abe5940fd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3f12e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"63859157-7c4d-4d47-a636-e253f3a4b394","keyName":"e2e-rate-a-941722","subscription":"e2e-rate-iso-a-941722","tenant":"e2e-shared-a-3f12e9","userId":"63859157-7c4d-4d47-a636-e253f3a4b394","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T19:01:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ad6e6d2f-5c85-4ded-959e-cd1abe5940fd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3f12e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9\",\"requestedSubscription\":\"e2e-rate-iso-a-941722\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T19:01:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ad6e6d2f-5c85-4ded-959e-cd1abe5940fd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3f12e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3f12e9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-941722","namespace":"ai-tenant-e2e-shared-a-3f12e9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9"}} {"level":"debug","ts":"2026-07-23T19:01:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ad6e6d2f-5c85-4ded-959e-cd1abe5940fd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:01:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad6e6d2f-5c85-4ded-959e-cd1abe5940fd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:01:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad6e6d2f-5c85-4ded-959e-cd1abe5940fd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:01:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad6e6d2f-5c85-4ded-959e-cd1abe5940fd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3f12e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:01:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad6e6d2f-5c85-4ded-959e-cd1abe5940fd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:01:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad6e6d2f-5c85-4ded-959e-cd1abe5940fd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T19:01:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad6e6d2f-5c85-4ded-959e-cd1abe5940fd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-941722"} {"level":"debug","ts":"2026-07-23T19:01:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad6e6d2f-5c85-4ded-959e-cd1abe5940fd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T19:01:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad6e6d2f-5c85-4ded-959e-cd1abe5940fd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"63859157-7c4d-4d47-a636-e253f3a4b394","keyName":"e2e-rate-a-941722","selected_subscription":"e2e-rate-iso-a-941722","selected_subscription_key":"ai-tenant-e2e-shared-a-3f12e9/e2e-rate-iso-a-941722@ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3f12e9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-941722","namespace":"ai-tenant-e2e-shared-a-3f12e9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T19:01:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad6e6d2f-5c85-4ded-959e-cd1abe5940fd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T19:01:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad6e6d2f-5c85-4ded-959e-cd1abe5940fd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T19:01:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1048dfd-6c28-469b-849d-b34f82edf854","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:51000","PortSpecifier":{"PortValue":51000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d1048dfd-6c28-469b-849d-b34f82edf854","method":"POST","path":"/ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9/v1/completions","host":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T19:01:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1048dfd-6c28-469b-849d-b34f82edf854","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:51000","PortSpecifier":{"PortValue":51000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784833294,"nanos":244062277},"http":{"id":"d1048dfd-6c28-469b-849d-b34f82edf854","method":"POST","headers":{":authority":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:01:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d1048dfd-6c28-469b-849d-b34f82edf854","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KCrO99NiJ9eglYPt_PhEJLOVUoyMCB2IiBURwvrSu5L4HEDQ7xIlwxR8shtL"} {"level":"debug","ts":"2026-07-23T19:01:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d1048dfd-6c28-469b-849d-b34f82edf854","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3f12e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KCrO99NiJ9eglYPt_PhEJLOVUoyMCB2IiBURwvrSu5L4HEDQ7xIlwxR8shtL\"}"} {"level":"debug","ts":"2026-07-23T19:01:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d1048dfd-6c28-469b-849d-b34f82edf854","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3f12e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"63859157-7c4d-4d47-a636-e253f3a4b394","keyName":"e2e-rate-a-941722","subscription":"e2e-rate-iso-a-941722","tenant":"e2e-shared-a-3f12e9","userId":"63859157-7c4d-4d47-a636-e253f3a4b394","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T19:01:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d1048dfd-6c28-469b-849d-b34f82edf854","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3f12e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9\",\"requestedSubscription\":\"e2e-rate-iso-a-941722\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T19:01:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d1048dfd-6c28-469b-849d-b34f82edf854","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3f12e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3f12e9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-941722","namespace":"ai-tenant-e2e-shared-a-3f12e9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9"}} {"level":"debug","ts":"2026-07-23T19:01:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d1048dfd-6c28-469b-849d-b34f82edf854","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:01:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1048dfd-6c28-469b-849d-b34f82edf854","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:01:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1048dfd-6c28-469b-849d-b34f82edf854","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:01:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1048dfd-6c28-469b-849d-b34f82edf854","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3f12e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:01:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1048dfd-6c28-469b-849d-b34f82edf854","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:01:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1048dfd-6c28-469b-849d-b34f82edf854","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T19:01:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1048dfd-6c28-469b-849d-b34f82edf854","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T19:01:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1048dfd-6c28-469b-849d-b34f82edf854","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-941722"} {"level":"debug","ts":"2026-07-23T19:01:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1048dfd-6c28-469b-849d-b34f82edf854","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"63859157-7c4d-4d47-a636-e253f3a4b394","keyName":"e2e-rate-a-941722","selected_subscription":"e2e-rate-iso-a-941722","selected_subscription_key":"ai-tenant-e2e-shared-a-3f12e9/e2e-rate-iso-a-941722@ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3f12e9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-941722","namespace":"ai-tenant-e2e-shared-a-3f12e9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T19:01:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1048dfd-6c28-469b-849d-b34f82edf854","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T19:01:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1048dfd-6c28-469b-849d-b34f82edf854","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T19:01:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c818592-ae2e-4457-8e2e-60910531a3be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:51014","PortSpecifier":{"PortValue":51014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7c818592-ae2e-4457-8e2e-60910531a3be","method":"POST","path":"/ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9/v1/completions","host":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T19:01:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c818592-ae2e-4457-8e2e-60910531a3be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:51014","PortSpecifier":{"PortValue":51014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784833295,"nanos":276021978},"http":{"id":"7c818592-ae2e-4457-8e2e-60910531a3be","method":"POST","headers":{":authority":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:01:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7c818592-ae2e-4457-8e2e-60910531a3be","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KCrO99NiJ9eglYPt_PhEJLOVUoyMCB2IiBURwvrSu5L4HEDQ7xIlwxR8shtL"} {"level":"debug","ts":"2026-07-23T19:01:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7c818592-ae2e-4457-8e2e-60910531a3be","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3f12e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KCrO99NiJ9eglYPt_PhEJLOVUoyMCB2IiBURwvrSu5L4HEDQ7xIlwxR8shtL\"}"} {"level":"debug","ts":"2026-07-23T19:01:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7c818592-ae2e-4457-8e2e-60910531a3be","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3f12e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"63859157-7c4d-4d47-a636-e253f3a4b394","keyName":"e2e-rate-a-941722","subscription":"e2e-rate-iso-a-941722","tenant":"e2e-shared-a-3f12e9","userId":"63859157-7c4d-4d47-a636-e253f3a4b394","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T19:01:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7c818592-ae2e-4457-8e2e-60910531a3be","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3f12e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9\",\"requestedSubscription\":\"e2e-rate-iso-a-941722\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T19:01:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7c818592-ae2e-4457-8e2e-60910531a3be","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3f12e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3f12e9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-941722","namespace":"ai-tenant-e2e-shared-a-3f12e9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9"}} {"level":"debug","ts":"2026-07-23T19:01:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7c818592-ae2e-4457-8e2e-60910531a3be","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:01:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c818592-ae2e-4457-8e2e-60910531a3be","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:01:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c818592-ae2e-4457-8e2e-60910531a3be","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:01:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c818592-ae2e-4457-8e2e-60910531a3be","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3f12e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:01:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c818592-ae2e-4457-8e2e-60910531a3be","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:01:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c818592-ae2e-4457-8e2e-60910531a3be","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T19:01:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c818592-ae2e-4457-8e2e-60910531a3be","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T19:01:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c818592-ae2e-4457-8e2e-60910531a3be","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-941722"} {"level":"debug","ts":"2026-07-23T19:01:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c818592-ae2e-4457-8e2e-60910531a3be","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"63859157-7c4d-4d47-a636-e253f3a4b394","keyName":"e2e-rate-a-941722","selected_subscription":"e2e-rate-iso-a-941722","selected_subscription_key":"ai-tenant-e2e-shared-a-3f12e9/e2e-rate-iso-a-941722@ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3f12e9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-941722","namespace":"ai-tenant-e2e-shared-a-3f12e9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T19:01:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c818592-ae2e-4457-8e2e-60910531a3be","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T19:01:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c818592-ae2e-4457-8e2e-60910531a3be","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T19:01:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dffd1647-71db-415d-8e91-184e67f496c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:51018","PortSpecifier":{"PortValue":51018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dffd1647-71db-415d-8e91-184e67f496c5","method":"POST","path":"/ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9/v1/completions","host":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T19:01:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dffd1647-71db-415d-8e91-184e67f496c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:51018","PortSpecifier":{"PortValue":51018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784833296,"nanos":318908469},"http":{"id":"dffd1647-71db-415d-8e91-184e67f496c5","method":"POST","headers":{":authority":"e2e-shared-a-3f12e9.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:01:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dffd1647-71db-415d-8e91-184e67f496c5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KCrO99NiJ9eglYPt_PhEJLOVUoyMCB2IiBURwvrSu5L4HEDQ7xIlwxR8shtL"} {"level":"debug","ts":"2026-07-23T19:01:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dffd1647-71db-415d-8e91-184e67f496c5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3f12e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KCrO99NiJ9eglYPt_PhEJLOVUoyMCB2IiBURwvrSu5L4HEDQ7xIlwxR8shtL\"}"} {"level":"debug","ts":"2026-07-23T19:01:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dffd1647-71db-415d-8e91-184e67f496c5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3f12e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"63859157-7c4d-4d47-a636-e253f3a4b394","keyName":"e2e-rate-a-941722","subscription":"e2e-rate-iso-a-941722","tenant":"e2e-shared-a-3f12e9","userId":"63859157-7c4d-4d47-a636-e253f3a4b394","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T19:01:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dffd1647-71db-415d-8e91-184e67f496c5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3f12e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9\",\"requestedSubscription\":\"e2e-rate-iso-a-941722\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T19:01:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dffd1647-71db-415d-8e91-184e67f496c5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3f12e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3f12e9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-941722","namespace":"ai-tenant-e2e-shared-a-3f12e9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9"}} {"level":"debug","ts":"2026-07-23T19:01:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dffd1647-71db-415d-8e91-184e67f496c5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:01:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dffd1647-71db-415d-8e91-184e67f496c5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:01:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dffd1647-71db-415d-8e91-184e67f496c5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:01:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dffd1647-71db-415d-8e91-184e67f496c5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3f12e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:01:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dffd1647-71db-415d-8e91-184e67f496c5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:01:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dffd1647-71db-415d-8e91-184e67f496c5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T19:01:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dffd1647-71db-415d-8e91-184e67f496c5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T19:01:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dffd1647-71db-415d-8e91-184e67f496c5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-941722"} {"level":"debug","ts":"2026-07-23T19:01:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dffd1647-71db-415d-8e91-184e67f496c5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"63859157-7c4d-4d47-a636-e253f3a4b394","keyName":"e2e-rate-a-941722","selected_subscription":"e2e-rate-iso-a-941722","selected_subscription_key":"ai-tenant-e2e-shared-a-3f12e9/e2e-rate-iso-a-941722@ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3f12e9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-941722","namespace":"ai-tenant-e2e-shared-a-3f12e9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-3f12e9/rate-test-model-3f12e9"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T19:01:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dffd1647-71db-415d-8e91-184e67f496c5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T19:01:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dffd1647-71db-415d-8e91-184e67f496c5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T19:01:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff329393-b72f-41d5-92ce-7b91965a72ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:43774","PortSpecifier":{"PortValue":43774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ff329393-b72f-41d5-92ce-7b91965a72ff","method":"POST","path":"/ai-tenant-e2e-shared-b-60de5a/rate-test-model-60de5a/v1/completions","host":"e2e-shared-b-60de5a.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T19:01:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff329393-b72f-41d5-92ce-7b91965a72ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:43774","PortSpecifier":{"PortValue":43774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784833296,"nanos":354470219},"http":{"id":"ff329393-b72f-41d5-92ce-7b91965a72ff","method":"POST","headers":{":authority":"e2e-shared-b-60de5a.apps.a067e04f-8027-4365-bdf3-4ae2263ba428.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-60de5a/rate-test-model-60de5a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:01:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ff329393-b72f-41d5-92ce-7b91965a72ff","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-J0bJQicSE339fPAP_8iKXu0MRp2JgWqRcpJmDbPkW1lJv1lH9TXDP1u7IEjP"} {"level":"debug","ts":"2026-07-23T19:01:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ff329393-b72f-41d5-92ce-7b91965a72ff","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-60de5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-J0bJQicSE339fPAP_8iKXu0MRp2JgWqRcpJmDbPkW1lJv1lH9TXDP1u7IEjP\"}"} {"level":"debug","ts":"2026-07-23T19:01:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ff329393-b72f-41d5-92ce-7b91965a72ff","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-60de5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3bdde6a6-38ec-44c0-9fbc-b9f59e0fab80","keyName":"e2e-rate-b-941722","subscription":"e2e-rate-iso-b-941722","tenant":"e2e-shared-b-60de5a","userId":"3bdde6a6-38ec-44c0-9fbc-b9f59e0fab80","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T19:01:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ff329393-b72f-41d5-92ce-7b91965a72ff","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-60de5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-60de5a/rate-test-model-60de5a\",\"requestedSubscription\":\"e2e-rate-iso-b-941722\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T19:01:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ff329393-b72f-41d5-92ce-7b91965a72ff","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-60de5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-60de5a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-941722","namespace":"ai-tenant-e2e-shared-b-60de5a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-60de5a/rate-test-model-60de5a"}} {"level":"debug","ts":"2026-07-23T19:01:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ff329393-b72f-41d5-92ce-7b91965a72ff","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:01:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff329393-b72f-41d5-92ce-7b91965a72ff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:01:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff329393-b72f-41d5-92ce-7b91965a72ff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:01:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff329393-b72f-41d5-92ce-7b91965a72ff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-60de5a/rate-test-model-60de5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-60de5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:01:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff329393-b72f-41d5-92ce-7b91965a72ff","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:01:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff329393-b72f-41d5-92ce-7b91965a72ff","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T19:01:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff329393-b72f-41d5-92ce-7b91965a72ff","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-941722"} {"level":"debug","ts":"2026-07-23T19:01:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff329393-b72f-41d5-92ce-7b91965a72ff","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T19:01:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff329393-b72f-41d5-92ce-7b91965a72ff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3bdde6a6-38ec-44c0-9fbc-b9f59e0fab80","keyName":"e2e-rate-b-941722","selected_subscription":"e2e-rate-iso-b-941722","selected_subscription_key":"ai-tenant-e2e-shared-b-60de5a/e2e-rate-iso-b-941722@ai-tenant-e2e-shared-b-60de5a/rate-test-model-60de5a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-60de5a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-941722","namespace":"ai-tenant-e2e-shared-b-60de5a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-60de5a/rate-test-model-60de5a"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T19:01:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff329393-b72f-41d5-92ce-7b91965a72ff","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T19:01:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff329393-b72f-41d5-92ce-7b91965a72ff","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T19:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0882fe6435b711ce01ab4b22f43377762d1fd0a3cbced48803039ec7162bdc10"} {"level":"info","ts":"2026-07-23T19:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a502f4d2c532a48816f31dcf90ff5b72deac59341effbb0cf803be09343c540"} {"level":"info","ts":"2026-07-23T19:01:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ec06140b12ba14db7461bb84f6a7180945ac9cec10a9bd75f6854cbdf1bcde9"} {"level":"info","ts":"2026-07-23T19:01:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c768cd563c46b2b974a29d99e67442d7053f324ea3c0cf9a35d54637f8a2fd81"} {"level":"info","ts":"2026-07-23T19:01:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80803bb035cb46e96f85330d823c5b4a51d899681433a069944248befee15f63"} {"level":"info","ts":"2026-07-23T19:01:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a2ac109e2b0acdff0c377cff4972a6c94eaf5e142fe5f5a8beb43adf7f59444"} {"level":"info","ts":"2026-07-23T19:01:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ba0d3c7281e872711a5a41c0e57b05fa646c667f7174bc952820007550bcf80"} {"level":"info","ts":"2026-07-23T19:01:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01dc86bce200c3a547d599fb3876fb880af8bf899c109377ca4884906a2b6cf9"} {"level":"info","ts":"2026-07-23T19:01:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88ad0057a7c40baaa2268661ac025caac926ffa70f1c8d3fcd7e26a02f66fa98"} {"level":"info","ts":"2026-07-23T19:01:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b6af7041eca9448ff67e45c677c131cd6969e1866deb062170055ce301a32fe"} {"level":"info","ts":"2026-07-23T19:01:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b8a3b735f58ac4e1dd9a9be2925a32de51a9f059d1931a7319e66f89952a8c7a"} {"level":"info","ts":"2026-07-23T19:01:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb789cca03f8645828a33df3688186f0a74aaeda044d8b956061301b553abcdd"} {"level":"info","ts":"2026-07-23T19:01:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5cf1cff681afbb118951d4b7af9d5961fd83df41b4e483d056c722b5c2fbf4b1"} {"level":"info","ts":"2026-07-23T19:01:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd4420a19de273354b4ee8d6bcc5dd007ac6dcb051e042a4d9ca110ccd77a109"} {"level":"info","ts":"2026-07-23T19:01:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54a61ae7e454cf4c0265c48a81cbea1be3d584c958c9cffc05c639389d21137a"} {"level":"info","ts":"2026-07-23T19:01:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a68b4b5e27badba1291ad9a6b42939067d4744662a85596f0bfdd65109d1d7c5"} {"level":"info","ts":"2026-07-23T19:01:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f8f5706b26ceb3a3fcc77d81e404fd8324b89d3ce7e60cd36a769c6b53d46b4"} {"level":"info","ts":"2026-07-23T19:01:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d84c98c837f80ac8b5cee410b7bf1346da95823cf8b4ee369680f8f0f6aca459"} {"level":"info","ts":"2026-07-23T19:01:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f836c35299bb1210718b2a60c1921e7762081ec69da642a16cd0ed02225bff5"} {"level":"info","ts":"2026-07-23T19:01:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c2e3af08a704270b873e9510c97cf7d9dc59d696821a50c889839d2e2575570"} {"level":"info","ts":"2026-07-23T19:01:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8390b966b63219fcc971320110cd1640fbb899a2816a8e864fcafb7708999aba"} {"level":"info","ts":"2026-07-23T19:01:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/821fcb95dd6327468b9230c7f1c64f7fa285e84720c0447ebd09f28a95ca40ed"} {"level":"info","ts":"2026-07-23T19:01:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5c49412432ee73dd8eb57aef8fec9fb5d443650a9a4749ac19ac93f901fbc64"} {"level":"info","ts":"2026-07-23T19:01:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a7703de1a0678473a3239ba24ee6bd51bc7cd63572cab0843f6f781646d45006"}