--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-02T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff11bdb0dacc69dae72fded9ff9d9c7f6e31bf1bb79743123f42e739a4c211e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff11bdb0dacc69dae72fded9ff9d9c7f6e31bf1bb79743123f42e739a4c211e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff11bdb0dacc69dae72fded9ff9d9c7f6e31bf1bb79743123f42e739a4c211e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff11bdb0dacc69dae72fded9ff9d9c7f6e31bf1bb79743123f42e739a4c211e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c9e27d6c8b07f356b7ef27534276a9bfe8e4dc61c69d6a4f47d0725e95d7221"} {"level":"info","ts":"2026-07-02T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff11bdb0dacc69dae72fded9ff9d9c7f6e31bf1bb79743123f42e739a4c211e4"} {"level":"info","ts":"2026-07-02T19:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eec55a3bd41059b95a42ef43e517c54c2155e91cf48a411350bb97af9880a82c"} {"level":"info","ts":"2026-07-02T19:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4c0b605d2e11a87dc905a07d3b0bfebcb4600547cce54040a004af1d2b77bc6"} {"level":"info","ts":"2026-07-02T19:39:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c9e27d6c8b07f356b7ef27534276a9bfe8e4dc61c69d6a4f47d0725e95d7221"} {"level":"info","ts":"2026-07-02T19:39:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff11bdb0dacc69dae72fded9ff9d9c7f6e31bf1bb79743123f42e739a4c211e4"} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0"} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0"} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0"} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0"} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0"} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0"} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99cdec734025ad55af5b39309314848f8d69e8e5277e4f4a1c1aeee618fcd545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0"} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99cdec734025ad55af5b39309314848f8d69e8e5277e4f4a1c1aeee618fcd545","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99cdec734025ad55af5b39309314848f8d69e8e5277e4f4a1c1aeee618fcd545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99cdec734025ad55af5b39309314848f8d69e8e5277e4f4a1c1aeee618fcd545"} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99cdec734025ad55af5b39309314848f8d69e8e5277e4f4a1c1aeee618fcd545","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99cdec734025ad55af5b39309314848f8d69e8e5277e4f4a1c1aeee618fcd545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99cdec734025ad55af5b39309314848f8d69e8e5277e4f4a1c1aeee618fcd545"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0"} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99cdec734025ad55af5b39309314848f8d69e8e5277e4f4a1c1aeee618fcd545","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99cdec734025ad55af5b39309314848f8d69e8e5277e4f4a1c1aeee618fcd545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99cdec734025ad55af5b39309314848f8d69e8e5277e4f4a1c1aeee618fcd545"} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99cdec734025ad55af5b39309314848f8d69e8e5277e4f4a1c1aeee618fcd545","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99cdec734025ad55af5b39309314848f8d69e8e5277e4f4a1c1aeee618fcd545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99cdec734025ad55af5b39309314848f8d69e8e5277e4f4a1c1aeee618fcd545"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0"} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99cdec734025ad55af5b39309314848f8d69e8e5277e4f4a1c1aeee618fcd545","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99cdec734025ad55af5b39309314848f8d69e8e5277e4f4a1c1aeee618fcd545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99cdec734025ad55af5b39309314848f8d69e8e5277e4f4a1c1aeee618fcd545"} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99cdec734025ad55af5b39309314848f8d69e8e5277e4f4a1c1aeee618fcd545","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0"} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99cdec734025ad55af5b39309314848f8d69e8e5277e4f4a1c1aeee618fcd545","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99cdec734025ad55af5b39309314848f8d69e8e5277e4f4a1c1aeee618fcd545","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99cdec734025ad55af5b39309314848f8d69e8e5277e4f4a1c1aeee618fcd545"} {"level":"error","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"084ccfd2860ca0f7075cd014651d7e41cd34b22fff8b74ea5da6aaa470ffa57a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0"} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"084ccfd2860ca0f7075cd014651d7e41cd34b22fff8b74ea5da6aaa470ffa57a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99cdec734025ad55af5b39309314848f8d69e8e5277e4f4a1c1aeee618fcd545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99cdec734025ad55af5b39309314848f8d69e8e5277e4f4a1c1aeee618fcd545"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99cdec734025ad55af5b39309314848f8d69e8e5277e4f4a1c1aeee618fcd545","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/084ccfd2860ca0f7075cd014651d7e41cd34b22fff8b74ea5da6aaa470ffa57a"} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"084ccfd2860ca0f7075cd014651d7e41cd34b22fff8b74ea5da6aaa470ffa57a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["084ccfd2860ca0f7075cd014651d7e41cd34b22fff8b74ea5da6aaa470ffa57a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"084ccfd2860ca0f7075cd014651d7e41cd34b22fff8b74ea5da6aaa470ffa57a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99cdec734025ad55af5b39309314848f8d69e8e5277e4f4a1c1aeee618fcd545","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0"} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"084ccfd2860ca0f7075cd014651d7e41cd34b22fff8b74ea5da6aaa470ffa57a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99cdec734025ad55af5b39309314848f8d69e8e5277e4f4a1c1aeee618fcd545"} {"level":"error","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06d383a9fe3ae7911a8ce9e440d2cfae688a20ad7492c0de8dbe84128197a266","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06d383a9fe3ae7911a8ce9e440d2cfae688a20ad7492c0de8dbe84128197a266","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06d383a9fe3ae7911a8ce9e440d2cfae688a20ad7492c0de8dbe84128197a266","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06d383a9fe3ae7911a8ce9e440d2cfae688a20ad7492c0de8dbe84128197a266","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/084ccfd2860ca0f7075cd014651d7e41cd34b22fff8b74ea5da6aaa470ffa57a"} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06d383a9fe3ae7911a8ce9e440d2cfae688a20ad7492c0de8dbe84128197a266","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0"} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06d383a9fe3ae7911a8ce9e440d2cfae688a20ad7492c0de8dbe84128197a266","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06d383a9fe3ae7911a8ce9e440d2cfae688a20ad7492c0de8dbe84128197a266"} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06d383a9fe3ae7911a8ce9e440d2cfae688a20ad7492c0de8dbe84128197a266","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06d383a9fe3ae7911a8ce9e440d2cfae688a20ad7492c0de8dbe84128197a266","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc49a72397436c73fccb9c7c1e230d89bf8937381bf828fdf962900b0b87c17f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc49a72397436c73fccb9c7c1e230d89bf8937381bf828fdf962900b0b87c17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc49a72397436c73fccb9c7c1e230d89bf8937381bf828fdf962900b0b87c17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc49a72397436c73fccb9c7c1e230d89bf8937381bf828fdf962900b0b87c17f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06d383a9fe3ae7911a8ce9e440d2cfae688a20ad7492c0de8dbe84128197a266"} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc49a72397436c73fccb9c7c1e230d89bf8937381bf828fdf962900b0b87c17f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc49a72397436c73fccb9c7c1e230d89bf8937381bf828fdf962900b0b87c17f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc49a72397436c73fccb9c7c1e230d89bf8937381bf828fdf962900b0b87c17f"} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc49a72397436c73fccb9c7c1e230d89bf8937381bf828fdf962900b0b87c17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06d383a9fe3ae7911a8ce9e440d2cfae688a20ad7492c0de8dbe84128197a266","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06d383a9fe3ae7911a8ce9e440d2cfae688a20ad7492c0de8dbe84128197a266"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc49a72397436c73fccb9c7c1e230d89bf8937381bf828fdf962900b0b87c17f"} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06d383a9fe3ae7911a8ce9e440d2cfae688a20ad7492c0de8dbe84128197a266","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06d383a9fe3ae7911a8ce9e440d2cfae688a20ad7492c0de8dbe84128197a266","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06d383a9fe3ae7911a8ce9e440d2cfae688a20ad7492c0de8dbe84128197a266","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc49a72397436c73fccb9c7c1e230d89bf8937381bf828fdf962900b0b87c17f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc49a72397436c73fccb9c7c1e230d89bf8937381bf828fdf962900b0b87c17f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc49a72397436c73fccb9c7c1e230d89bf8937381bf828fdf962900b0b87c17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef93b9e82af1d5de37dfc31e29a3e497351ad0345605a42708839748b02e907f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06d383a9fe3ae7911a8ce9e440d2cfae688a20ad7492c0de8dbe84128197a266"} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef93b9e82af1d5de37dfc31e29a3e497351ad0345605a42708839748b02e907f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06d383a9fe3ae7911a8ce9e440d2cfae688a20ad7492c0de8dbe84128197a266","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06d383a9fe3ae7911a8ce9e440d2cfae688a20ad7492c0de8dbe84128197a266"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06d383a9fe3ae7911a8ce9e440d2cfae688a20ad7492c0de8dbe84128197a266","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc49a72397436c73fccb9c7c1e230d89bf8937381bf828fdf962900b0b87c17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef93b9e82af1d5de37dfc31e29a3e497351ad0345605a42708839748b02e907f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef93b9e82af1d5de37dfc31e29a3e497351ad0345605a42708839748b02e907f"} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef93b9e82af1d5de37dfc31e29a3e497351ad0345605a42708839748b02e907f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06d383a9fe3ae7911a8ce9e440d2cfae688a20ad7492c0de8dbe84128197a266","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef93b9e82af1d5de37dfc31e29a3e497351ad0345605a42708839748b02e907f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef93b9e82af1d5de37dfc31e29a3e497351ad0345605a42708839748b02e907f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef93b9e82af1d5de37dfc31e29a3e497351ad0345605a42708839748b02e907f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef93b9e82af1d5de37dfc31e29a3e497351ad0345605a42708839748b02e907f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef93b9e82af1d5de37dfc31e29a3e497351ad0345605a42708839748b02e907f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ef93b9e82af1d5de37dfc31e29a3e497351ad0345605a42708839748b02e907f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ef93b9e82af1d5de37dfc31e29a3e497351ad0345605a42708839748b02e907f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef93b9e82af1d5de37dfc31e29a3e497351ad0345605a42708839748b02e907f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc49a72397436c73fccb9c7c1e230d89bf8937381bf828fdf962900b0b87c17f"} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef93b9e82af1d5de37dfc31e29a3e497351ad0345605a42708839748b02e907f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06d383a9fe3ae7911a8ce9e440d2cfae688a20ad7492c0de8dbe84128197a266"} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef93b9e82af1d5de37dfc31e29a3e497351ad0345605a42708839748b02e907f"} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6216e1b5eca7de76f5e36a9f42cc75dca4d49ab019212644f3a6e90ad7b2822","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6216e1b5eca7de76f5e36a9f42cc75dca4d49ab019212644f3a6e90ad7b2822","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6216e1b5eca7de76f5e36a9f42cc75dca4d49ab019212644f3a6e90ad7b2822","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6216e1b5eca7de76f5e36a9f42cc75dca4d49ab019212644f3a6e90ad7b2822"} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6216e1b5eca7de76f5e36a9f42cc75dca4d49ab019212644f3a6e90ad7b2822","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6216e1b5eca7de76f5e36a9f42cc75dca4d49ab019212644f3a6e90ad7b2822"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6216e1b5eca7de76f5e36a9f42cc75dca4d49ab019212644f3a6e90ad7b2822","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6216e1b5eca7de76f5e36a9f42cc75dca4d49ab019212644f3a6e90ad7b2822","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4"} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6216e1b5eca7de76f5e36a9f42cc75dca4d49ab019212644f3a6e90ad7b2822"} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"deca459fc42eb996c9540247c488e3df8ff727b29ddd8913240bb7d90f03edea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"deca459fc42eb996c9540247c488e3df8ff727b29ddd8913240bb7d90f03edea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f4af5df131d7bbc9eb57502cf3ea657757665fd7162c1e7bfef6cd681c5e279","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f4af5df131d7bbc9eb57502cf3ea657757665fd7162c1e7bfef6cd681c5e279","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"deca459fc42eb996c9540247c488e3df8ff727b29ddd8913240bb7d90f03edea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f4af5df131d7bbc9eb57502cf3ea657757665fd7162c1e7bfef6cd681c5e279","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f4af5df131d7bbc9eb57502cf3ea657757665fd7162c1e7bfef6cd681c5e279","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"deca459fc42eb996c9540247c488e3df8ff727b29ddd8913240bb7d90f03edea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4"} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f4af5df131d7bbc9eb57502cf3ea657757665fd7162c1e7bfef6cd681c5e279","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"deca459fc42eb996c9540247c488e3df8ff727b29ddd8913240bb7d90f03edea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"deca459fc42eb996c9540247c488e3df8ff727b29ddd8913240bb7d90f03edea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"deca459fc42eb996c9540247c488e3df8ff727b29ddd8913240bb7d90f03edea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/deca459fc42eb996c9540247c488e3df8ff727b29ddd8913240bb7d90f03edea"} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f4af5df131d7bbc9eb57502cf3ea657757665fd7162c1e7bfef6cd681c5e279"} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f4af5df131d7bbc9eb57502cf3ea657757665fd7162c1e7bfef6cd681c5e279","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f4af5df131d7bbc9eb57502cf3ea657757665fd7162c1e7bfef6cd681c5e279"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f4af5df131d7bbc9eb57502cf3ea657757665fd7162c1e7bfef6cd681c5e279","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4"} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"deca459fc42eb996c9540247c488e3df8ff727b29ddd8913240bb7d90f03edea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f4af5df131d7bbc9eb57502cf3ea657757665fd7162c1e7bfef6cd681c5e279","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/deca459fc42eb996c9540247c488e3df8ff727b29ddd8913240bb7d90f03edea"} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f4af5df131d7bbc9eb57502cf3ea657757665fd7162c1e7bfef6cd681c5e279"} {"level":"error","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4"} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4"} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"deca459fc42eb996c9540247c488e3df8ff727b29ddd8913240bb7d90f03edea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["deca459fc42eb996c9540247c488e3df8ff727b29ddd8913240bb7d90f03edea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4"} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"deca459fc42eb996c9540247c488e3df8ff727b29ddd8913240bb7d90f03edea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"deca459fc42eb996c9540247c488e3df8ff727b29ddd8913240bb7d90f03edea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/deca459fc42eb996c9540247c488e3df8ff727b29ddd8913240bb7d90f03edea"} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"deca459fc42eb996c9540247c488e3df8ff727b29ddd8913240bb7d90f03edea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"deca459fc42eb996c9540247c488e3df8ff727b29ddd8913240bb7d90f03edea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["deca459fc42eb996c9540247c488e3df8ff727b29ddd8913240bb7d90f03edea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/deca459fc42eb996c9540247c488e3df8ff727b29ddd8913240bb7d90f03edea"} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"deca459fc42eb996c9540247c488e3df8ff727b29ddd8913240bb7d90f03edea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"deca459fc42eb996c9540247c488e3df8ff727b29ddd8913240bb7d90f03edea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["deca459fc42eb996c9540247c488e3df8ff727b29ddd8913240bb7d90f03edea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/deca459fc42eb996c9540247c488e3df8ff727b29ddd8913240bb7d90f03edea"} {"level":"error","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"deca459fc42eb996c9540247c488e3df8ff727b29ddd8913240bb7d90f03edea","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"deca459fc42eb996c9540247c488e3df8ff727b29ddd8913240bb7d90f03edea\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"deca459fc42eb996c9540247c488e3df8ff727b29ddd8913240bb7d90f03edea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"deca459fc42eb996c9540247c488e3df8ff727b29ddd8913240bb7d90f03edea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44386f5dd620462d3755c3873f62ae20d8616f844db325f25dff700607c1f9c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44386f5dd620462d3755c3873f62ae20d8616f844db325f25dff700607c1f9c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44386f5dd620462d3755c3873f62ae20d8616f844db325f25dff700607c1f9c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44386f5dd620462d3755c3873f62ae20d8616f844db325f25dff700607c1f9c3"} {"level":"info","ts":"2026-07-02T19:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44386f5dd620462d3755c3873f62ae20d8616f844db325f25dff700607c1f9c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44386f5dd620462d3755c3873f62ae20d8616f844db325f25dff700607c1f9c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-02T19:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"44386f5dd620462d3755c3873f62ae20d8616f844db325f25dff700607c1f9c3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"44386f5dd620462d3755c3873f62ae20d8616f844db325f25dff700607c1f9c3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-02T19:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44386f5dd620462d3755c3873f62ae20d8616f844db325f25dff700607c1f9c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44386f5dd620462d3755c3873f62ae20d8616f844db325f25dff700607c1f9c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44386f5dd620462d3755c3873f62ae20d8616f844db325f25dff700607c1f9c3"} {"level":"info","ts":"2026-07-02T19:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44386f5dd620462d3755c3873f62ae20d8616f844db325f25dff700607c1f9c3"} {"level":"debug","ts":"2026-07-02T19:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44386f5dd620462d3755c3873f62ae20d8616f844db325f25dff700607c1f9c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44386f5dd620462d3755c3873f62ae20d8616f844db325f25dff700607c1f9c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44386f5dd620462d3755c3873f62ae20d8616f844db325f25dff700607c1f9c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44386f5dd620462d3755c3873f62ae20d8616f844db325f25dff700607c1f9c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44386f5dd620462d3755c3873f62ae20d8616f844db325f25dff700607c1f9c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44386f5dd620462d3755c3873f62ae20d8616f844db325f25dff700607c1f9c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44386f5dd620462d3755c3873f62ae20d8616f844db325f25dff700607c1f9c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44386f5dd620462d3755c3873f62ae20d8616f844db325f25dff700607c1f9c3"} {"level":"debug","ts":"2026-07-02T19:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44386f5dd620462d3755c3873f62ae20d8616f844db325f25dff700607c1f9c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44386f5dd620462d3755c3873f62ae20d8616f844db325f25dff700607c1f9c3"} {"level":"debug","ts":"2026-07-02T19:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44386f5dd620462d3755c3873f62ae20d8616f844db325f25dff700607c1f9c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44386f5dd620462d3755c3873f62ae20d8616f844db325f25dff700607c1f9c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44386f5dd620462d3755c3873f62ae20d8616f844db325f25dff700607c1f9c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44386f5dd620462d3755c3873f62ae20d8616f844db325f25dff700607c1f9c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44386f5dd620462d3755c3873f62ae20d8616f844db325f25dff700607c1f9c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44386f5dd620462d3755c3873f62ae20d8616f844db325f25dff700607c1f9c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44386f5dd620462d3755c3873f62ae20d8616f844db325f25dff700607c1f9c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44386f5dd620462d3755c3873f62ae20d8616f844db325f25dff700607c1f9c3"} {"level":"debug","ts":"2026-07-02T19:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44386f5dd620462d3755c3873f62ae20d8616f844db325f25dff700607c1f9c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44386f5dd620462d3755c3873f62ae20d8616f844db325f25dff700607c1f9c3"} {"level":"debug","ts":"2026-07-02T19:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d531338e8bffe092a46c86d5299198465cd1953eb7cd47f7e0ca1b40c95730ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d531338e8bffe092a46c86d5299198465cd1953eb7cd47f7e0ca1b40c95730ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d531338e8bffe092a46c86d5299198465cd1953eb7cd47f7e0ca1b40c95730ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44386f5dd620462d3755c3873f62ae20d8616f844db325f25dff700607c1f9c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44386f5dd620462d3755c3873f62ae20d8616f844db325f25dff700607c1f9c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d531338e8bffe092a46c86d5299198465cd1953eb7cd47f7e0ca1b40c95730ff"} {"level":"info","ts":"2026-07-02T19:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44386f5dd620462d3755c3873f62ae20d8616f844db325f25dff700607c1f9c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d531338e8bffe092a46c86d5299198465cd1953eb7cd47f7e0ca1b40c95730ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44386f5dd620462d3755c3873f62ae20d8616f844db325f25dff700607c1f9c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d531338e8bffe092a46c86d5299198465cd1953eb7cd47f7e0ca1b40c95730ff"} {"level":"debug","ts":"2026-07-02T19:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d531338e8bffe092a46c86d5299198465cd1953eb7cd47f7e0ca1b40c95730ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d531338e8bffe092a46c86d5299198465cd1953eb7cd47f7e0ca1b40c95730ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d531338e8bffe092a46c86d5299198465cd1953eb7cd47f7e0ca1b40c95730ff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44386f5dd620462d3755c3873f62ae20d8616f844db325f25dff700607c1f9c3"} {"level":"debug","ts":"2026-07-02T19:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d531338e8bffe092a46c86d5299198465cd1953eb7cd47f7e0ca1b40c95730ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d531338e8bffe092a46c86d5299198465cd1953eb7cd47f7e0ca1b40c95730ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d531338e8bffe092a46c86d5299198465cd1953eb7cd47f7e0ca1b40c95730ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d531338e8bffe092a46c86d5299198465cd1953eb7cd47f7e0ca1b40c95730ff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d531338e8bffe092a46c86d5299198465cd1953eb7cd47f7e0ca1b40c95730ff"} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d531338e8bffe092a46c86d5299198465cd1953eb7cd47f7e0ca1b40c95730ff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d531338e8bffe092a46c86d5299198465cd1953eb7cd47f7e0ca1b40c95730ff"} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d531338e8bffe092a46c86d5299198465cd1953eb7cd47f7e0ca1b40c95730ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d531338e8bffe092a46c86d5299198465cd1953eb7cd47f7e0ca1b40c95730ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d531338e8bffe092a46c86d5299198465cd1953eb7cd47f7e0ca1b40c95730ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d531338e8bffe092a46c86d5299198465cd1953eb7cd47f7e0ca1b40c95730ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d531338e8bffe092a46c86d5299198465cd1953eb7cd47f7e0ca1b40c95730ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d531338e8bffe092a46c86d5299198465cd1953eb7cd47f7e0ca1b40c95730ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d531338e8bffe092a46c86d5299198465cd1953eb7cd47f7e0ca1b40c95730ff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d531338e8bffe092a46c86d5299198465cd1953eb7cd47f7e0ca1b40c95730ff"} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d531338e8bffe092a46c86d5299198465cd1953eb7cd47f7e0ca1b40c95730ff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d531338e8bffe092a46c86d5299198465cd1953eb7cd47f7e0ca1b40c95730ff"} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d531338e8bffe092a46c86d5299198465cd1953eb7cd47f7e0ca1b40c95730ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d531338e8bffe092a46c86d5299198465cd1953eb7cd47f7e0ca1b40c95730ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d531338e8bffe092a46c86d5299198465cd1953eb7cd47f7e0ca1b40c95730ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d531338e8bffe092a46c86d5299198465cd1953eb7cd47f7e0ca1b40c95730ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d531338e8bffe092a46c86d5299198465cd1953eb7cd47f7e0ca1b40c95730ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d531338e8bffe092a46c86d5299198465cd1953eb7cd47f7e0ca1b40c95730ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d531338e8bffe092a46c86d5299198465cd1953eb7cd47f7e0ca1b40c95730ff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d531338e8bffe092a46c86d5299198465cd1953eb7cd47f7e0ca1b40c95730ff"} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d531338e8bffe092a46c86d5299198465cd1953eb7cd47f7e0ca1b40c95730ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9ef5fcd22b97c75a5bae905eb4f6e4e93e717973c069a4ea6ff0ac647df5b28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d531338e8bffe092a46c86d5299198465cd1953eb7cd47f7e0ca1b40c95730ff"} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9ef5fcd22b97c75a5bae905eb4f6e4e93e717973c069a4ea6ff0ac647df5b28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9ef5fcd22b97c75a5bae905eb4f6e4e93e717973c069a4ea6ff0ac647df5b28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9ef5fcd22b97c75a5bae905eb4f6e4e93e717973c069a4ea6ff0ac647df5b28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9ef5fcd22b97c75a5bae905eb4f6e4e93e717973c069a4ea6ff0ac647df5b28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9ef5fcd22b97c75a5bae905eb4f6e4e93e717973c069a4ea6ff0ac647df5b28"} {"level":"error","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f9ef5fcd22b97c75a5bae905eb4f6e4e93e717973c069a4ea6ff0ac647df5b28","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f9ef5fcd22b97c75a5bae905eb4f6e4e93e717973c069a4ea6ff0ac647df5b28\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d531338e8bffe092a46c86d5299198465cd1953eb7cd47f7e0ca1b40c95730ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d531338e8bffe092a46c86d5299198465cd1953eb7cd47f7e0ca1b40c95730ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d531338e8bffe092a46c86d5299198465cd1953eb7cd47f7e0ca1b40c95730ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9ef5fcd22b97c75a5bae905eb4f6e4e93e717973c069a4ea6ff0ac647df5b28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d531338e8bffe092a46c86d5299198465cd1953eb7cd47f7e0ca1b40c95730ff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9ef5fcd22b97c75a5bae905eb4f6e4e93e717973c069a4ea6ff0ac647df5b28"} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9ef5fcd22b97c75a5bae905eb4f6e4e93e717973c069a4ea6ff0ac647df5b28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9ef5fcd22b97c75a5bae905eb4f6e4e93e717973c069a4ea6ff0ac647df5b28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d531338e8bffe092a46c86d5299198465cd1953eb7cd47f7e0ca1b40c95730ff"} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9ef5fcd22b97c75a5bae905eb4f6e4e93e717973c069a4ea6ff0ac647df5b28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1418b8f7bd9001331af78cfba790ec0e378948c3a23ca0455a4f6c6c52dd359","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1418b8f7bd9001331af78cfba790ec0e378948c3a23ca0455a4f6c6c52dd359","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9ef5fcd22b97c75a5bae905eb4f6e4e93e717973c069a4ea6ff0ac647df5b28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1418b8f7bd9001331af78cfba790ec0e378948c3a23ca0455a4f6c6c52dd359","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1418b8f7bd9001331af78cfba790ec0e378948c3a23ca0455a4f6c6c52dd359","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1418b8f7bd9001331af78cfba790ec0e378948c3a23ca0455a4f6c6c52dd359"} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1418b8f7bd9001331af78cfba790ec0e378948c3a23ca0455a4f6c6c52dd359","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1418b8f7bd9001331af78cfba790ec0e378948c3a23ca0455a4f6c6c52dd359"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9ef5fcd22b97c75a5bae905eb4f6e4e93e717973c069a4ea6ff0ac647df5b28"} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1418b8f7bd9001331af78cfba790ec0e378948c3a23ca0455a4f6c6c52dd359","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1418b8f7bd9001331af78cfba790ec0e378948c3a23ca0455a4f6c6c52dd359","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1418b8f7bd9001331af78cfba790ec0e378948c3a23ca0455a4f6c6c52dd359","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1418b8f7bd9001331af78cfba790ec0e378948c3a23ca0455a4f6c6c52dd359","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1418b8f7bd9001331af78cfba790ec0e378948c3a23ca0455a4f6c6c52dd359","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1418b8f7bd9001331af78cfba790ec0e378948c3a23ca0455a4f6c6c52dd359"} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1418b8f7bd9001331af78cfba790ec0e378948c3a23ca0455a4f6c6c52dd359","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1418b8f7bd9001331af78cfba790ec0e378948c3a23ca0455a4f6c6c52dd359"} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1418b8f7bd9001331af78cfba790ec0e378948c3a23ca0455a4f6c6c52dd359","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1418b8f7bd9001331af78cfba790ec0e378948c3a23ca0455a4f6c6c52dd359"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1418b8f7bd9001331af78cfba790ec0e378948c3a23ca0455a4f6c6c52dd359","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1418b8f7bd9001331af78cfba790ec0e378948c3a23ca0455a4f6c6c52dd359","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1418b8f7bd9001331af78cfba790ec0e378948c3a23ca0455a4f6c6c52dd359","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1418b8f7bd9001331af78cfba790ec0e378948c3a23ca0455a4f6c6c52dd359","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1418b8f7bd9001331af78cfba790ec0e378948c3a23ca0455a4f6c6c52dd359","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77d1db4f4a3ea82578d6062611d0bf369253290061bd026fa8950626c08510d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1418b8f7bd9001331af78cfba790ec0e378948c3a23ca0455a4f6c6c52dd359"} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77d1db4f4a3ea82578d6062611d0bf369253290061bd026fa8950626c08510d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1418b8f7bd9001331af78cfba790ec0e378948c3a23ca0455a4f6c6c52dd359","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1418b8f7bd9001331af78cfba790ec0e378948c3a23ca0455a4f6c6c52dd359"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77d1db4f4a3ea82578d6062611d0bf369253290061bd026fa8950626c08510d4"} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1418b8f7bd9001331af78cfba790ec0e378948c3a23ca0455a4f6c6c52dd359","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77d1db4f4a3ea82578d6062611d0bf369253290061bd026fa8950626c08510d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77d1db4f4a3ea82578d6062611d0bf369253290061bd026fa8950626c08510d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1418b8f7bd9001331af78cfba790ec0e378948c3a23ca0455a4f6c6c52dd359"} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77d1db4f4a3ea82578d6062611d0bf369253290061bd026fa8950626c08510d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1418b8f7bd9001331af78cfba790ec0e378948c3a23ca0455a4f6c6c52dd359","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77d1db4f4a3ea82578d6062611d0bf369253290061bd026fa8950626c08510d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77d1db4f4a3ea82578d6062611d0bf369253290061bd026fa8950626c08510d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77d1db4f4a3ea82578d6062611d0bf369253290061bd026fa8950626c08510d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77d1db4f4a3ea82578d6062611d0bf369253290061bd026fa8950626c08510d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77d1db4f4a3ea82578d6062611d0bf369253290061bd026fa8950626c08510d4"} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77d1db4f4a3ea82578d6062611d0bf369253290061bd026fa8950626c08510d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77d1db4f4a3ea82578d6062611d0bf369253290061bd026fa8950626c08510d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1418b8f7bd9001331af78cfba790ec0e378948c3a23ca0455a4f6c6c52dd359"} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77d1db4f4a3ea82578d6062611d0bf369253290061bd026fa8950626c08510d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08063225ec3a74512c59d3c017789790fe65ed94e3bb970c8cfc4548f8d9b685","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77d1db4f4a3ea82578d6062611d0bf369253290061bd026fa8950626c08510d4"} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08063225ec3a74512c59d3c017789790fe65ed94e3bb970c8cfc4548f8d9b685","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77d1db4f4a3ea82578d6062611d0bf369253290061bd026fa8950626c08510d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08063225ec3a74512c59d3c017789790fe65ed94e3bb970c8cfc4548f8d9b685","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08063225ec3a74512c59d3c017789790fe65ed94e3bb970c8cfc4548f8d9b685","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08063225ec3a74512c59d3c017789790fe65ed94e3bb970c8cfc4548f8d9b685","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08063225ec3a74512c59d3c017789790fe65ed94e3bb970c8cfc4548f8d9b685"} {"level":"error","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"08063225ec3a74512c59d3c017789790fe65ed94e3bb970c8cfc4548f8d9b685","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"08063225ec3a74512c59d3c017789790fe65ed94e3bb970c8cfc4548f8d9b685\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08063225ec3a74512c59d3c017789790fe65ed94e3bb970c8cfc4548f8d9b685","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08063225ec3a74512c59d3c017789790fe65ed94e3bb970c8cfc4548f8d9b685"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08063225ec3a74512c59d3c017789790fe65ed94e3bb970c8cfc4548f8d9b685","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08063225ec3a74512c59d3c017789790fe65ed94e3bb970c8cfc4548f8d9b685","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08063225ec3a74512c59d3c017789790fe65ed94e3bb970c8cfc4548f8d9b685"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77d1db4f4a3ea82578d6062611d0bf369253290061bd026fa8950626c08510d4"} {"level":"error","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"08063225ec3a74512c59d3c017789790fe65ed94e3bb970c8cfc4548f8d9b685","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"08063225ec3a74512c59d3c017789790fe65ed94e3bb970c8cfc4548f8d9b685\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08063225ec3a74512c59d3c017789790fe65ed94e3bb970c8cfc4548f8d9b685","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08063225ec3a74512c59d3c017789790fe65ed94e3bb970c8cfc4548f8d9b685","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08063225ec3a74512c59d3c017789790fe65ed94e3bb970c8cfc4548f8d9b685","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08063225ec3a74512c59d3c017789790fe65ed94e3bb970c8cfc4548f8d9b685"} {"level":"error","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"08063225ec3a74512c59d3c017789790fe65ed94e3bb970c8cfc4548f8d9b685","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"08063225ec3a74512c59d3c017789790fe65ed94e3bb970c8cfc4548f8d9b685\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08063225ec3a74512c59d3c017789790fe65ed94e3bb970c8cfc4548f8d9b685","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08063225ec3a74512c59d3c017789790fe65ed94e3bb970c8cfc4548f8d9b685","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08063225ec3a74512c59d3c017789790fe65ed94e3bb970c8cfc4548f8d9b685"} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08063225ec3a74512c59d3c017789790fe65ed94e3bb970c8cfc4548f8d9b685","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08063225ec3a74512c59d3c017789790fe65ed94e3bb970c8cfc4548f8d9b685"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08063225ec3a74512c59d3c017789790fe65ed94e3bb970c8cfc4548f8d9b685","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08063225ec3a74512c59d3c017789790fe65ed94e3bb970c8cfc4548f8d9b685","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08063225ec3a74512c59d3c017789790fe65ed94e3bb970c8cfc4548f8d9b685","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08063225ec3a74512c59d3c017789790fe65ed94e3bb970c8cfc4548f8d9b685"} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08063225ec3a74512c59d3c017789790fe65ed94e3bb970c8cfc4548f8d9b685","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08063225ec3a74512c59d3c017789790fe65ed94e3bb970c8cfc4548f8d9b685"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201"} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08063225ec3a74512c59d3c017789790fe65ed94e3bb970c8cfc4548f8d9b685","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08063225ec3a74512c59d3c017789790fe65ed94e3bb970c8cfc4548f8d9b685","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08063225ec3a74512c59d3c017789790fe65ed94e3bb970c8cfc4548f8d9b685"} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08063225ec3a74512c59d3c017789790fe65ed94e3bb970c8cfc4548f8d9b685","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201"} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08063225ec3a74512c59d3c017789790fe65ed94e3bb970c8cfc4548f8d9b685","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08063225ec3a74512c59d3c017789790fe65ed94e3bb970c8cfc4548f8d9b685"} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08063225ec3a74512c59d3c017789790fe65ed94e3bb970c8cfc4548f8d9b685","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08063225ec3a74512c59d3c017789790fe65ed94e3bb970c8cfc4548f8d9b685"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08063225ec3a74512c59d3c017789790fe65ed94e3bb970c8cfc4548f8d9b685","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201"} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a59956f9a76a73b1bbc6f2c201225bbde34eee75f2c82b1c8adfc9ecae7b7ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a59956f9a76a73b1bbc6f2c201225bbde34eee75f2c82b1c8adfc9ecae7b7ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08063225ec3a74512c59d3c017789790fe65ed94e3bb970c8cfc4548f8d9b685","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a59956f9a76a73b1bbc6f2c201225bbde34eee75f2c82b1c8adfc9ecae7b7ad"} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a59956f9a76a73b1bbc6f2c201225bbde34eee75f2c82b1c8adfc9ecae7b7ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a59956f9a76a73b1bbc6f2c201225bbde34eee75f2c82b1c8adfc9ecae7b7ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08063225ec3a74512c59d3c017789790fe65ed94e3bb970c8cfc4548f8d9b685"} {"level":"info","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a59956f9a76a73b1bbc6f2c201225bbde34eee75f2c82b1c8adfc9ecae7b7ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a59956f9a76a73b1bbc6f2c201225bbde34eee75f2c82b1c8adfc9ecae7b7ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201"} {"level":"debug","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a59956f9a76a73b1bbc6f2c201225bbde34eee75f2c82b1c8adfc9ecae7b7ad"} {"level":"info","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201"} {"level":"info","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132"} {"level":"info","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201"} {"level":"info","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132"} {"level":"info","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"008b8ba76d00537d82b196352191d6ea8cbaeab7bbfe931da1362feed6d41cda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201"} {"level":"info","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/008b8ba76d00537d82b196352191d6ea8cbaeab7bbfe931da1362feed6d41cda"} {"level":"info","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"008b8ba76d00537d82b196352191d6ea8cbaeab7bbfe931da1362feed6d41cda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132"} {"level":"debug","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"008b8ba76d00537d82b196352191d6ea8cbaeab7bbfe931da1362feed6d41cda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["008b8ba76d00537d82b196352191d6ea8cbaeab7bbfe931da1362feed6d41cda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201"} {"level":"info","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/008b8ba76d00537d82b196352191d6ea8cbaeab7bbfe931da1362feed6d41cda"} {"level":"info","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"008b8ba76d00537d82b196352191d6ea8cbaeab7bbfe931da1362feed6d41cda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/008b8ba76d00537d82b196352191d6ea8cbaeab7bbfe931da1362feed6d41cda"} {"level":"info","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"008b8ba76d00537d82b196352191d6ea8cbaeab7bbfe931da1362feed6d41cda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132"} {"level":"info","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132"} {"level":"debug","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132"} {"level":"info","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132"} {"level":"info","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132"} {"level":"error","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:41:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9daf4fb3-55ef-4e7a-aacf-300eb14ee473","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:35294","PortSpecifier":{"PortValue":35294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9daf4fb3-55ef-4e7a-aacf-300eb14ee473","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:41:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9daf4fb3-55ef-4e7a-aacf-300eb14ee473","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:35294","PortSpecifier":{"PortValue":35294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021292,"nanos":819497379},"http":{"id":"9daf4fb3-55ef-4e7a-aacf-300eb14ee473","method":"POST","headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:41:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9daf4fb3-55ef-4e7a-aacf-300eb14ee473","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-02T19:41:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9daf4fb3-55ef-4e7a-aacf-300eb14ee473","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"478a9049-7589-4443-b6b2-6a4e0000802d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"]}} {"level":"debug","ts":"2026-07-02T19:41:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9daf4fb3-55ef-4e7a-aacf-300eb14ee473","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"478a9049-7589-4443-b6b2-6a4e0000802d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:41:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9daf4fb3-55ef-4e7a-aacf-300eb14ee473","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:41:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9daf4fb3-55ef-4e7a-aacf-300eb14ee473","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:41:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9daf4fb3-55ef-4e7a-aacf-300eb14ee473","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4a101a/auth-test-model-4a101a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:41:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9daf4fb3-55ef-4e7a-aacf-300eb14ee473","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-02T19:41:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9daf4fb3-55ef-4e7a-aacf-300eb14ee473","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-02T19:41:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9daf4fb3-55ef-4e7a-aacf-300eb14ee473","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-02T19:41:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9daf4fb3-55ef-4e7a-aacf-300eb14ee473","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:41:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9daf4fb3-55ef-4e7a-aacf-300eb14ee473","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:41:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c9deef2-77db-4b09-93a3-e46b25f5b7c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43742","PortSpecifier":{"PortValue":43742}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0c9deef2-77db-4b09-93a3-e46b25f5b7c9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:41:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c9deef2-77db-4b09-93a3-e46b25f5b7c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43742","PortSpecifier":{"PortValue":43742}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021292,"nanos":879988369},"http":{"id":"0c9deef2-77db-4b09-93a3-e46b25f5b7c9","method":"POST","headers":{":authority":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:41:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0c9deef2-77db-4b09-93a3-e46b25f5b7c9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-02T19:41:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0c9deef2-77db-4b09-93a3-e46b25f5b7c9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"478a9049-7589-4443-b6b2-6a4e0000802d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"]}} {"level":"debug","ts":"2026-07-02T19:41:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0c9deef2-77db-4b09-93a3-e46b25f5b7c9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"478a9049-7589-4443-b6b2-6a4e0000802d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:41:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c9deef2-77db-4b09-93a3-e46b25f5b7c9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:41:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c9deef2-77db-4b09-93a3-e46b25f5b7c9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:41:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c9deef2-77db-4b09-93a3-e46b25f5b7c9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f80343/auth-test-model-f80343\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:41:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0c9deef2-77db-4b09-93a3-e46b25f5b7c9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-02T19:41:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c9deef2-77db-4b09-93a3-e46b25f5b7c9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-02T19:41:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c9deef2-77db-4b09-93a3-e46b25f5b7c9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-02T19:41:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c9deef2-77db-4b09-93a3-e46b25f5b7c9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:41:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c9deef2-77db-4b09-93a3-e46b25f5b7c9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:41:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"acd9696a-b467-4d31-a86f-8bdee12b5b90","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:35300","PortSpecifier":{"PortValue":35300}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"acd9696a-b467-4d31-a86f-8bdee12b5b90","method":"GET","path":"/maas-api/v1/api-keys/01109869-5533-4346-a8f8-80e1ee81d1d8","host":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:41:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"acd9696a-b467-4d31-a86f-8bdee12b5b90","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:35300","PortSpecifier":{"PortValue":35300}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021292,"nanos":969007118},"http":{"id":"acd9696a-b467-4d31-a86f-8bdee12b5b90","method":"GET","headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/01109869-5533-4346-a8f8-80e1ee81d1d8",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:41:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"acd9696a-b467-4d31-a86f-8bdee12b5b90","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-02T19:41:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"acd9696a-b467-4d31-a86f-8bdee12b5b90","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"478a9049-7589-4443-b6b2-6a4e0000802d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"]}} {"level":"debug","ts":"2026-07-02T19:41:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"acd9696a-b467-4d31-a86f-8bdee12b5b90","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"478a9049-7589-4443-b6b2-6a4e0000802d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/01109869-5533-4346-a8f8-80e1ee81d1d8",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:41:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"acd9696a-b467-4d31-a86f-8bdee12b5b90","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:41:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"acd9696a-b467-4d31-a86f-8bdee12b5b90","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:41:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"acd9696a-b467-4d31-a86f-8bdee12b5b90","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4a101a/auth-test-model-4a101a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:41:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"acd9696a-b467-4d31-a86f-8bdee12b5b90","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-02T19:41:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"acd9696a-b467-4d31-a86f-8bdee12b5b90","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-02T19:41:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"acd9696a-b467-4d31-a86f-8bdee12b5b90","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-02T19:41:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"acd9696a-b467-4d31-a86f-8bdee12b5b90","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:41:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"acd9696a-b467-4d31-a86f-8bdee12b5b90","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:41:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7813a841-2447-4656-b1ac-c2bd26ad41c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43750","PortSpecifier":{"PortValue":43750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7813a841-2447-4656-b1ac-c2bd26ad41c7","method":"GET","path":"/maas-api/v1/api-keys/0a45981f-3ce6-4b39-9537-fa26c789e939","host":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:41:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7813a841-2447-4656-b1ac-c2bd26ad41c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43750","PortSpecifier":{"PortValue":43750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021293,"nanos":6697934},"http":{"id":"7813a841-2447-4656-b1ac-c2bd26ad41c7","method":"GET","headers":{":authority":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0a45981f-3ce6-4b39-9537-fa26c789e939",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:41:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7813a841-2447-4656-b1ac-c2bd26ad41c7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-02T19:41:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7813a841-2447-4656-b1ac-c2bd26ad41c7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"478a9049-7589-4443-b6b2-6a4e0000802d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"]}} {"level":"debug","ts":"2026-07-02T19:41:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7813a841-2447-4656-b1ac-c2bd26ad41c7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"478a9049-7589-4443-b6b2-6a4e0000802d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0a45981f-3ce6-4b39-9537-fa26c789e939",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:41:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7813a841-2447-4656-b1ac-c2bd26ad41c7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:41:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7813a841-2447-4656-b1ac-c2bd26ad41c7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:41:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7813a841-2447-4656-b1ac-c2bd26ad41c7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f80343/auth-test-model-f80343\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:41:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7813a841-2447-4656-b1ac-c2bd26ad41c7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-02T19:41:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7813a841-2447-4656-b1ac-c2bd26ad41c7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-02T19:41:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7813a841-2447-4656-b1ac-c2bd26ad41c7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-02T19:41:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7813a841-2447-4656-b1ac-c2bd26ad41c7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:41:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7813a841-2447-4656-b1ac-c2bd26ad41c7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:41:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b44b769-3044-454f-9b31-b3b9777b2a6f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50494","PortSpecifier":{"PortValue":50494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6b44b769-3044-454f-9b31-b3b9777b2a6f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:41:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b44b769-3044-454f-9b31-b3b9777b2a6f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50494","PortSpecifier":{"PortValue":50494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021307,"nanos":998421568},"http":{"id":"6b44b769-3044-454f-9b31-b3b9777b2a6f","method":"POST","headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:41:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6b44b769-3044-454f-9b31-b3b9777b2a6f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-02T19:41:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6b44b769-3044-454f-9b31-b3b9777b2a6f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"478a9049-7589-4443-b6b2-6a4e0000802d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"]}} {"level":"debug","ts":"2026-07-02T19:41:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6b44b769-3044-454f-9b31-b3b9777b2a6f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"478a9049-7589-4443-b6b2-6a4e0000802d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:41:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b44b769-3044-454f-9b31-b3b9777b2a6f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:41:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b44b769-3044-454f-9b31-b3b9777b2a6f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:41:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b44b769-3044-454f-9b31-b3b9777b2a6f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4a101a/auth-test-model-4a101a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:41:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6b44b769-3044-454f-9b31-b3b9777b2a6f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-02T19:41:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b44b769-3044-454f-9b31-b3b9777b2a6f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-02T19:41:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b44b769-3044-454f-9b31-b3b9777b2a6f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-02T19:41:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b44b769-3044-454f-9b31-b3b9777b2a6f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:41:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b44b769-3044-454f-9b31-b3b9777b2a6f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:41:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a27d8acc-7428-4515-815a-1192cd9d5b58","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42320","PortSpecifier":{"PortValue":42320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a27d8acc-7428-4515-815a-1192cd9d5b58","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:41:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a27d8acc-7428-4515-815a-1192cd9d5b58","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42320","PortSpecifier":{"PortValue":42320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021308,"nanos":42674233},"http":{"id":"a27d8acc-7428-4515-815a-1192cd9d5b58","method":"POST","headers":{":authority":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:41:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a27d8acc-7428-4515-815a-1192cd9d5b58","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-02T19:41:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a27d8acc-7428-4515-815a-1192cd9d5b58","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"478a9049-7589-4443-b6b2-6a4e0000802d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"]}} {"level":"debug","ts":"2026-07-02T19:41:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a27d8acc-7428-4515-815a-1192cd9d5b58","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"478a9049-7589-4443-b6b2-6a4e0000802d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:41:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a27d8acc-7428-4515-815a-1192cd9d5b58","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:41:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a27d8acc-7428-4515-815a-1192cd9d5b58","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:41:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a27d8acc-7428-4515-815a-1192cd9d5b58","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f80343/auth-test-model-f80343\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:41:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a27d8acc-7428-4515-815a-1192cd9d5b58","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-02T19:41:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a27d8acc-7428-4515-815a-1192cd9d5b58","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-02T19:41:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a27d8acc-7428-4515-815a-1192cd9d5b58","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-02T19:41:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a27d8acc-7428-4515-815a-1192cd9d5b58","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:41:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a27d8acc-7428-4515-815a-1192cd9d5b58","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:41:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"156974c1-b015-4c0e-bc23-ebe8213d26ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50504","PortSpecifier":{"PortValue":50504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"156974c1-b015-4c0e-bc23-ebe8213d26ef","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:41:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"156974c1-b015-4c0e-bc23-ebe8213d26ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50504","PortSpecifier":{"PortValue":50504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021308,"nanos":87559071},"http":{"id":"156974c1-b015-4c0e-bc23-ebe8213d26ef","method":"GET","headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:41:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"156974c1-b015-4c0e-bc23-ebe8213d26ef","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tewQ2Zwr9d8FfelU_MQoWV5IQCvgafmlFmI912a6XrnnJsZ1dFqUpGRpKHhH"} {"level":"debug","ts":"2026-07-02T19:41:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"156974c1-b015-4c0e-bc23-ebe8213d26ef","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tewQ2Zwr9d8FfelU_MQoWV5IQCvgafmlFmI912a6XrnnJsZ1dFqUpGRpKHhH\"}"} {"level":"debug","ts":"2026-07-02T19:41:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"156974c1-b015-4c0e-bc23-ebe8213d26ef","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a7938bc7-c359-41ae-a8fc-62d3eed7694f","keyName":"e2e-auth-iso-a-8a3648","subscription":"e2e-auth-iso-8c70eb","tenant":"e2e-shared-a-4a101a","userId":"a7938bc7-c359-41ae-a8fc-62d3eed7694f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-02T19:41:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"156974c1-b015-4c0e-bc23-ebe8213d26ef","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:41:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"156974c1-b015-4c0e-bc23-ebe8213d26ef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:41:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"156974c1-b015-4c0e-bc23-ebe8213d26ef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:41:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"156974c1-b015-4c0e-bc23-ebe8213d26ef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4a101a/auth-test-model-4a101a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:41:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"156974c1-b015-4c0e-bc23-ebe8213d26ef","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-02T19:41:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"156974c1-b015-4c0e-bc23-ebe8213d26ef","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-8c70eb"} {"level":"debug","ts":"2026-07-02T19:41:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"156974c1-b015-4c0e-bc23-ebe8213d26ef","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-02T19:41:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"156974c1-b015-4c0e-bc23-ebe8213d26ef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-02T19:41:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"156974c1-b015-4c0e-bc23-ebe8213d26ef","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:41:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"156974c1-b015-4c0e-bc23-ebe8213d26ef","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:42:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec7f0144-9edf-41e9-a82a-169b584b875f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45062","PortSpecifier":{"PortValue":45062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ec7f0144-9edf-41e9-a82a-169b584b875f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:42:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec7f0144-9edf-41e9-a82a-169b584b875f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45062","PortSpecifier":{"PortValue":45062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021325,"nanos":212755988},"http":{"id":"ec7f0144-9edf-41e9-a82a-169b584b875f","method":"POST","headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:42:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ec7f0144-9edf-41e9-a82a-169b584b875f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-02T19:42:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ec7f0144-9edf-41e9-a82a-169b584b875f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"478a9049-7589-4443-b6b2-6a4e0000802d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"]}} {"level":"debug","ts":"2026-07-02T19:42:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ec7f0144-9edf-41e9-a82a-169b584b875f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"478a9049-7589-4443-b6b2-6a4e0000802d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:42:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec7f0144-9edf-41e9-a82a-169b584b875f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:42:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec7f0144-9edf-41e9-a82a-169b584b875f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:42:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec7f0144-9edf-41e9-a82a-169b584b875f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4a101a/auth-test-model-4a101a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:42:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ec7f0144-9edf-41e9-a82a-169b584b875f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-02T19:42:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec7f0144-9edf-41e9-a82a-169b584b875f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-02T19:42:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec7f0144-9edf-41e9-a82a-169b584b875f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-02T19:42:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec7f0144-9edf-41e9-a82a-169b584b875f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:42:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec7f0144-9edf-41e9-a82a-169b584b875f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:42:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df9b3e33-ef51-4ddc-bc1f-89bcdb8dfa09","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46082","PortSpecifier":{"PortValue":46082}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"df9b3e33-ef51-4ddc-bc1f-89bcdb8dfa09","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:42:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df9b3e33-ef51-4ddc-bc1f-89bcdb8dfa09","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46082","PortSpecifier":{"PortValue":46082}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021325,"nanos":250897645},"http":{"id":"df9b3e33-ef51-4ddc-bc1f-89bcdb8dfa09","method":"POST","headers":{":authority":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:42:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"df9b3e33-ef51-4ddc-bc1f-89bcdb8dfa09","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-02T19:42:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"df9b3e33-ef51-4ddc-bc1f-89bcdb8dfa09","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"478a9049-7589-4443-b6b2-6a4e0000802d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"]}} {"level":"debug","ts":"2026-07-02T19:42:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"df9b3e33-ef51-4ddc-bc1f-89bcdb8dfa09","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"478a9049-7589-4443-b6b2-6a4e0000802d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:42:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df9b3e33-ef51-4ddc-bc1f-89bcdb8dfa09","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:42:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df9b3e33-ef51-4ddc-bc1f-89bcdb8dfa09","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:42:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df9b3e33-ef51-4ddc-bc1f-89bcdb8dfa09","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f80343/auth-test-model-f80343\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:42:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"df9b3e33-ef51-4ddc-bc1f-89bcdb8dfa09","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-02T19:42:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df9b3e33-ef51-4ddc-bc1f-89bcdb8dfa09","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-02T19:42:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df9b3e33-ef51-4ddc-bc1f-89bcdb8dfa09","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-02T19:42:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df9b3e33-ef51-4ddc-bc1f-89bcdb8dfa09","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:42:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df9b3e33-ef51-4ddc-bc1f-89bcdb8dfa09","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:42:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"698a773f-5f0e-4c66-889b-cbecee3b6eee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46096","PortSpecifier":{"PortValue":46096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"698a773f-5f0e-4c66-889b-cbecee3b6eee","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:42:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"698a773f-5f0e-4c66-889b-cbecee3b6eee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46096","PortSpecifier":{"PortValue":46096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021325,"nanos":288930637},"http":{"id":"698a773f-5f0e-4c66-889b-cbecee3b6eee","method":"GET","headers":{":authority":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:42:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"698a773f-5f0e-4c66-889b-cbecee3b6eee","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1BPMoeEUqdgyJY6fu_4KIMGizDPlcZlXmsD4P1snk1efXRQU5tS3vchIbMSPF"} {"level":"debug","ts":"2026-07-02T19:42:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"698a773f-5f0e-4c66-889b-cbecee3b6eee","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f80343.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1BPMoeEUqdgyJY6fu_4KIMGizDPlcZlXmsD4P1snk1efXRQU5tS3vchIbMSPF\"}"} {"level":"debug","ts":"2026-07-02T19:42:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"698a773f-5f0e-4c66-889b-cbecee3b6eee","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f80343.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-02T19:42:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"698a773f-5f0e-4c66-889b-cbecee3b6eee","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:42:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"698a773f-5f0e-4c66-889b-cbecee3b6eee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:42:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"698a773f-5f0e-4c66-889b-cbecee3b6eee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-02T19:42:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"698a773f-5f0e-4c66-889b-cbecee3b6eee","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-02T19:42:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"698a773f-5f0e-4c66-889b-cbecee3b6eee","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d55c61e-a452-48ad-a5bc-966c048900f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34840","PortSpecifier":{"PortValue":34840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0d55c61e-a452-48ad-a5bc-966c048900f7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d55c61e-a452-48ad-a5bc-966c048900f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34840","PortSpecifier":{"PortValue":34840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021340,"nanos":299161598},"http":{"id":"0d55c61e-a452-48ad-a5bc-966c048900f7","method":"POST","headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0d55c61e-a452-48ad-a5bc-966c048900f7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0d55c61e-a452-48ad-a5bc-966c048900f7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"478a9049-7589-4443-b6b2-6a4e0000802d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"]}} {"level":"debug","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0d55c61e-a452-48ad-a5bc-966c048900f7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"478a9049-7589-4443-b6b2-6a4e0000802d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d55c61e-a452-48ad-a5bc-966c048900f7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d55c61e-a452-48ad-a5bc-966c048900f7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d55c61e-a452-48ad-a5bc-966c048900f7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4a101a/auth-test-model-4a101a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0d55c61e-a452-48ad-a5bc-966c048900f7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d55c61e-a452-48ad-a5bc-966c048900f7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d55c61e-a452-48ad-a5bc-966c048900f7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d55c61e-a452-48ad-a5bc-966c048900f7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d55c61e-a452-48ad-a5bc-966c048900f7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4202294d-d561-4bf2-96a8-17935df1b8ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43702","PortSpecifier":{"PortValue":43702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4202294d-d561-4bf2-96a8-17935df1b8ab","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4202294d-d561-4bf2-96a8-17935df1b8ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43702","PortSpecifier":{"PortValue":43702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021340,"nanos":336097622},"http":{"id":"4202294d-d561-4bf2-96a8-17935df1b8ab","method":"POST","headers":{":authority":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4202294d-d561-4bf2-96a8-17935df1b8ab","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4202294d-d561-4bf2-96a8-17935df1b8ab","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"478a9049-7589-4443-b6b2-6a4e0000802d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"]}} {"level":"debug","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4202294d-d561-4bf2-96a8-17935df1b8ab","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"478a9049-7589-4443-b6b2-6a4e0000802d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4202294d-d561-4bf2-96a8-17935df1b8ab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4202294d-d561-4bf2-96a8-17935df1b8ab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4202294d-d561-4bf2-96a8-17935df1b8ab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f80343/auth-test-model-f80343\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4202294d-d561-4bf2-96a8-17935df1b8ab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4202294d-d561-4bf2-96a8-17935df1b8ab","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4202294d-d561-4bf2-96a8-17935df1b8ab","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4202294d-d561-4bf2-96a8-17935df1b8ab","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4202294d-d561-4bf2-96a8-17935df1b8ab","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cdb4ab7c-a4e5-498a-ad3b-53f8fe1f9855","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34848","PortSpecifier":{"PortValue":34848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cdb4ab7c-a4e5-498a-ad3b-53f8fe1f9855","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cdb4ab7c-a4e5-498a-ad3b-53f8fe1f9855","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34848","PortSpecifier":{"PortValue":34848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021340,"nanos":376436337},"http":{"id":"cdb4ab7c-a4e5-498a-ad3b-53f8fe1f9855","method":"POST","headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cdb4ab7c-a4e5-498a-ad3b-53f8fe1f9855","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cdb4ab7c-a4e5-498a-ad3b-53f8fe1f9855","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"478a9049-7589-4443-b6b2-6a4e0000802d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"]}} {"level":"debug","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cdb4ab7c-a4e5-498a-ad3b-53f8fe1f9855","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"478a9049-7589-4443-b6b2-6a4e0000802d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cdb4ab7c-a4e5-498a-ad3b-53f8fe1f9855","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cdb4ab7c-a4e5-498a-ad3b-53f8fe1f9855","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cdb4ab7c-a4e5-498a-ad3b-53f8fe1f9855","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4a101a/auth-test-model-4a101a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cdb4ab7c-a4e5-498a-ad3b-53f8fe1f9855","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cdb4ab7c-a4e5-498a-ad3b-53f8fe1f9855","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cdb4ab7c-a4e5-498a-ad3b-53f8fe1f9855","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cdb4ab7c-a4e5-498a-ad3b-53f8fe1f9855","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cdb4ab7c-a4e5-498a-ad3b-53f8fe1f9855","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"129d6fc2-cdc4-4af7-ab55-b3ff47c9c2cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43712","PortSpecifier":{"PortValue":43712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"129d6fc2-cdc4-4af7-ab55-b3ff47c9c2cc","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"129d6fc2-cdc4-4af7-ab55-b3ff47c9c2cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43712","PortSpecifier":{"PortValue":43712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021340,"nanos":413327705},"http":{"id":"129d6fc2-cdc4-4af7-ab55-b3ff47c9c2cc","method":"POST","headers":{":authority":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"129d6fc2-cdc4-4af7-ab55-b3ff47c9c2cc","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"129d6fc2-cdc4-4af7-ab55-b3ff47c9c2cc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"478a9049-7589-4443-b6b2-6a4e0000802d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"]}} {"level":"debug","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"129d6fc2-cdc4-4af7-ab55-b3ff47c9c2cc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"478a9049-7589-4443-b6b2-6a4e0000802d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"129d6fc2-cdc4-4af7-ab55-b3ff47c9c2cc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"129d6fc2-cdc4-4af7-ab55-b3ff47c9c2cc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"129d6fc2-cdc4-4af7-ab55-b3ff47c9c2cc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f80343/auth-test-model-f80343\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"129d6fc2-cdc4-4af7-ab55-b3ff47c9c2cc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"129d6fc2-cdc4-4af7-ab55-b3ff47c9c2cc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"129d6fc2-cdc4-4af7-ab55-b3ff47c9c2cc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"129d6fc2-cdc4-4af7-ab55-b3ff47c9c2cc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:42:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"129d6fc2-cdc4-4af7-ab55-b3ff47c9c2cc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d249f7dc-17ff-4ecc-9297-2a0cb8aec428","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44838","PortSpecifier":{"PortValue":44838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d249f7dc-17ff-4ecc-9297-2a0cb8aec428","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d249f7dc-17ff-4ecc-9297-2a0cb8aec428","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44838","PortSpecifier":{"PortValue":44838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021355,"nanos":423683390},"http":{"id":"d249f7dc-17ff-4ecc-9297-2a0cb8aec428","method":"POST","headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d249f7dc-17ff-4ecc-9297-2a0cb8aec428","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d249f7dc-17ff-4ecc-9297-2a0cb8aec428","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"478a9049-7589-4443-b6b2-6a4e0000802d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"]}} {"level":"debug","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d249f7dc-17ff-4ecc-9297-2a0cb8aec428","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"478a9049-7589-4443-b6b2-6a4e0000802d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d249f7dc-17ff-4ecc-9297-2a0cb8aec428","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d249f7dc-17ff-4ecc-9297-2a0cb8aec428","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d249f7dc-17ff-4ecc-9297-2a0cb8aec428","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4a101a/auth-test-model-4a101a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d249f7dc-17ff-4ecc-9297-2a0cb8aec428","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d249f7dc-17ff-4ecc-9297-2a0cb8aec428","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d249f7dc-17ff-4ecc-9297-2a0cb8aec428","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d249f7dc-17ff-4ecc-9297-2a0cb8aec428","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d249f7dc-17ff-4ecc-9297-2a0cb8aec428","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3e4ed3c-038d-459f-a599-b4ee643853b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38904","PortSpecifier":{"PortValue":38904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b3e4ed3c-038d-459f-a599-b4ee643853b2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3e4ed3c-038d-459f-a599-b4ee643853b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38904","PortSpecifier":{"PortValue":38904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021355,"nanos":462231330},"http":{"id":"b3e4ed3c-038d-459f-a599-b4ee643853b2","method":"POST","headers":{":authority":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b3e4ed3c-038d-459f-a599-b4ee643853b2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b3e4ed3c-038d-459f-a599-b4ee643853b2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"478a9049-7589-4443-b6b2-6a4e0000802d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"]}} {"level":"debug","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b3e4ed3c-038d-459f-a599-b4ee643853b2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"478a9049-7589-4443-b6b2-6a4e0000802d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3e4ed3c-038d-459f-a599-b4ee643853b2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3e4ed3c-038d-459f-a599-b4ee643853b2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3e4ed3c-038d-459f-a599-b4ee643853b2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f80343/auth-test-model-f80343\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b3e4ed3c-038d-459f-a599-b4ee643853b2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3e4ed3c-038d-459f-a599-b4ee643853b2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3e4ed3c-038d-459f-a599-b4ee643853b2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3e4ed3c-038d-459f-a599-b4ee643853b2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3e4ed3c-038d-459f-a599-b4ee643853b2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c6b62d2-a0b9-4ceb-9397-4f2d60728b9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38908","PortSpecifier":{"PortValue":38908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2c6b62d2-a0b9-4ceb-9397-4f2d60728b9e","method":"GET","path":"/maas-api/v1/api-keys/fcea8cef-b177-4d6d-89d5-f4d49710121b","host":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c6b62d2-a0b9-4ceb-9397-4f2d60728b9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38908","PortSpecifier":{"PortValue":38908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021355,"nanos":506704800},"http":{"id":"2c6b62d2-a0b9-4ceb-9397-4f2d60728b9e","method":"GET","headers":{":authority":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/fcea8cef-b177-4d6d-89d5-f4d49710121b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2c6b62d2-a0b9-4ceb-9397-4f2d60728b9e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2c6b62d2-a0b9-4ceb-9397-4f2d60728b9e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"478a9049-7589-4443-b6b2-6a4e0000802d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"]}} {"level":"debug","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2c6b62d2-a0b9-4ceb-9397-4f2d60728b9e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"478a9049-7589-4443-b6b2-6a4e0000802d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/fcea8cef-b177-4d6d-89d5-f4d49710121b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c6b62d2-a0b9-4ceb-9397-4f2d60728b9e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c6b62d2-a0b9-4ceb-9397-4f2d60728b9e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c6b62d2-a0b9-4ceb-9397-4f2d60728b9e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f80343/auth-test-model-f80343\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2c6b62d2-a0b9-4ceb-9397-4f2d60728b9e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c6b62d2-a0b9-4ceb-9397-4f2d60728b9e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c6b62d2-a0b9-4ceb-9397-4f2d60728b9e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c6b62d2-a0b9-4ceb-9397-4f2d60728b9e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c6b62d2-a0b9-4ceb-9397-4f2d60728b9e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1572adeb-14e3-4736-9b99-5bbd591b5c5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44842","PortSpecifier":{"PortValue":44842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1572adeb-14e3-4736-9b99-5bbd591b5c5b","method":"GET","path":"/maas-api/v1/api-keys/fcea8cef-b177-4d6d-89d5-f4d49710121b","host":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1572adeb-14e3-4736-9b99-5bbd591b5c5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44842","PortSpecifier":{"PortValue":44842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021355,"nanos":539666139},"http":{"id":"1572adeb-14e3-4736-9b99-5bbd591b5c5b","method":"GET","headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/fcea8cef-b177-4d6d-89d5-f4d49710121b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1572adeb-14e3-4736-9b99-5bbd591b5c5b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1572adeb-14e3-4736-9b99-5bbd591b5c5b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"478a9049-7589-4443-b6b2-6a4e0000802d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"]}} {"level":"debug","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1572adeb-14e3-4736-9b99-5bbd591b5c5b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"478a9049-7589-4443-b6b2-6a4e0000802d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/fcea8cef-b177-4d6d-89d5-f4d49710121b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1572adeb-14e3-4736-9b99-5bbd591b5c5b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1572adeb-14e3-4736-9b99-5bbd591b5c5b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1572adeb-14e3-4736-9b99-5bbd591b5c5b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4a101a/auth-test-model-4a101a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1572adeb-14e3-4736-9b99-5bbd591b5c5b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1572adeb-14e3-4736-9b99-5bbd591b5c5b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1572adeb-14e3-4736-9b99-5bbd591b5c5b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1572adeb-14e3-4736-9b99-5bbd591b5c5b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:42:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1572adeb-14e3-4736-9b99-5bbd591b5c5b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:42:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c76999e8-c318-4939-be48-86cf9b376d05","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39482","PortSpecifier":{"PortValue":39482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c76999e8-c318-4939-be48-86cf9b376d05","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:42:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c76999e8-c318-4939-be48-86cf9b376d05","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39482","PortSpecifier":{"PortValue":39482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021372,"nanos":668448302},"http":{"id":"c76999e8-c318-4939-be48-86cf9b376d05","method":"POST","headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:42:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c76999e8-c318-4939-be48-86cf9b376d05","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-02T19:42:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c76999e8-c318-4939-be48-86cf9b376d05","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"478a9049-7589-4443-b6b2-6a4e0000802d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"]}} {"level":"debug","ts":"2026-07-02T19:42:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c76999e8-c318-4939-be48-86cf9b376d05","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"478a9049-7589-4443-b6b2-6a4e0000802d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:42:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c76999e8-c318-4939-be48-86cf9b376d05","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:42:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c76999e8-c318-4939-be48-86cf9b376d05","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:42:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c76999e8-c318-4939-be48-86cf9b376d05","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4a101a/auth-test-model-4a101a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:42:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c76999e8-c318-4939-be48-86cf9b376d05","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-02T19:42:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c76999e8-c318-4939-be48-86cf9b376d05","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-02T19:42:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c76999e8-c318-4939-be48-86cf9b376d05","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-02T19:42:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c76999e8-c318-4939-be48-86cf9b376d05","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:42:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c76999e8-c318-4939-be48-86cf9b376d05","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:42:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"715b2aa6-41ff-465f-ac68-eb967b02006b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33804","PortSpecifier":{"PortValue":33804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"715b2aa6-41ff-465f-ac68-eb967b02006b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:42:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"715b2aa6-41ff-465f-ac68-eb967b02006b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33804","PortSpecifier":{"PortValue":33804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021372,"nanos":708049136},"http":{"id":"715b2aa6-41ff-465f-ac68-eb967b02006b","method":"POST","headers":{":authority":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:42:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"715b2aa6-41ff-465f-ac68-eb967b02006b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-02T19:42:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"715b2aa6-41ff-465f-ac68-eb967b02006b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"478a9049-7589-4443-b6b2-6a4e0000802d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"]}} {"level":"debug","ts":"2026-07-02T19:42:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"715b2aa6-41ff-465f-ac68-eb967b02006b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"478a9049-7589-4443-b6b2-6a4e0000802d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:42:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"715b2aa6-41ff-465f-ac68-eb967b02006b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:42:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"715b2aa6-41ff-465f-ac68-eb967b02006b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:42:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"715b2aa6-41ff-465f-ac68-eb967b02006b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f80343/auth-test-model-f80343\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:42:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"715b2aa6-41ff-465f-ac68-eb967b02006b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-02T19:42:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"715b2aa6-41ff-465f-ac68-eb967b02006b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-02T19:42:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"715b2aa6-41ff-465f-ac68-eb967b02006b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-02T19:42:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"715b2aa6-41ff-465f-ac68-eb967b02006b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:42:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"715b2aa6-41ff-465f-ac68-eb967b02006b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:42:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e238df64-bd2b-401b-89dc-86b37a42b465","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39496","PortSpecifier":{"PortValue":39496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e238df64-bd2b-401b-89dc-86b37a42b465","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:42:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e238df64-bd2b-401b-89dc-86b37a42b465","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39496","PortSpecifier":{"PortValue":39496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021372,"nanos":748305170},"http":{"id":"e238df64-bd2b-401b-89dc-86b37a42b465","method":"POST","headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:42:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e238df64-bd2b-401b-89dc-86b37a42b465","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1fEdVYbJHIVMGUxU_aah65b5OKJM96Zs2nTDjrZE2jEzQ671qFiILjvSvR5r"} {"level":"debug","ts":"2026-07-02T19:42:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e238df64-bd2b-401b-89dc-86b37a42b465","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1fEdVYbJHIVMGUxU_aah65b5OKJM96Zs2nTDjrZE2jEzQ671qFiILjvSvR5r\"}"} {"level":"debug","ts":"2026-07-02T19:42:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e238df64-bd2b-401b-89dc-86b37a42b465","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6869d2bb-ec2b-4ff2-aaaa-f4a88a2cfb70","keyName":"e2e-auth-iso-a-215abd","subscription":"e2e-auth-iso-d4d488","tenant":"e2e-shared-a-4a101a","userId":"6869d2bb-ec2b-4ff2-aaaa-f4a88a2cfb70","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-02T19:42:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e238df64-bd2b-401b-89dc-86b37a42b465","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:42:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e238df64-bd2b-401b-89dc-86b37a42b465","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:42:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e238df64-bd2b-401b-89dc-86b37a42b465","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:42:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e238df64-bd2b-401b-89dc-86b37a42b465","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4a101a/auth-test-model-4a101a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:42:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e238df64-bd2b-401b-89dc-86b37a42b465","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-d4d488"} {"level":"debug","ts":"2026-07-02T19:42:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e238df64-bd2b-401b-89dc-86b37a42b465","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-02T19:42:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e238df64-bd2b-401b-89dc-86b37a42b465","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-02T19:42:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e238df64-bd2b-401b-89dc-86b37a42b465","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-02T19:42:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e238df64-bd2b-401b-89dc-86b37a42b465","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:42:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e238df64-bd2b-401b-89dc-86b37a42b465","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:42:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/06d383a9fe3ae7911a8ce9e440d2cfae688a20ad7492c0de8dbe84128197a266"} {"level":"info","ts":"2026-07-02T19:42:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77d1db4f4a3ea82578d6062611d0bf369253290061bd026fa8950626c08510d4"} {"level":"info","ts":"2026-07-02T19:42:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f4af5df131d7bbc9eb57502cf3ea657757665fd7162c1e7bfef6cd681c5e279"} {"level":"info","ts":"2026-07-02T19:42:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d6216e1b5eca7de76f5e36a9f42cc75dca4d49ab019212644f3a6e90ad7b2822"} {"level":"info","ts":"2026-07-02T19:42:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d7e4fc1d5c9b088064ebed322c09c686f03712ea72ad39d71e136082a4be9a0"} {"level":"info","ts":"2026-07-02T19:42:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08063225ec3a74512c59d3c017789790fe65ed94e3bb970c8cfc4548f8d9b685"} {"level":"info","ts":"2026-07-02T19:42:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/44386f5dd620462d3755c3873f62ae20d8616f844db325f25dff700607c1f9c3"} {"level":"info","ts":"2026-07-02T19:42:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f9ef5fcd22b97c75a5bae905eb4f6e4e93e717973c069a4ea6ff0ac647df5b28"} {"level":"info","ts":"2026-07-02T19:42:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99cdec734025ad55af5b39309314848f8d69e8e5277e4f4a1c1aeee618fcd545"} {"level":"info","ts":"2026-07-02T19:42:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/084ccfd2860ca0f7075cd014651d7e41cd34b22fff8b74ea5da6aaa470ffa57a"} {"level":"info","ts":"2026-07-02T19:42:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c1418b8f7bd9001331af78cfba790ec0e378948c3a23ca0455a4f6c6c52dd359"} {"level":"info","ts":"2026-07-02T19:42:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/008b8ba76d00537d82b196352191d6ea8cbaeab7bbfe931da1362feed6d41cda"} {"level":"info","ts":"2026-07-02T19:42:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d531338e8bffe092a46c86d5299198465cd1953eb7cd47f7e0ca1b40c95730ff"} {"level":"info","ts":"2026-07-02T19:42:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a59956f9a76a73b1bbc6f2c201225bbde34eee75f2c82b1c8adfc9ecae7b7ad"} {"level":"info","ts":"2026-07-02T19:42:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc49a72397436c73fccb9c7c1e230d89bf8937381bf828fdf962900b0b87c17f"} {"level":"info","ts":"2026-07-02T19:42:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/deca459fc42eb996c9540247c488e3df8ff727b29ddd8913240bb7d90f03edea"} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7"} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7"} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7"} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7"} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7"} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7"} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7"} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7"} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7"} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457e61003855648e9a7c8a8e3f79fc8825a4143913e2ce3048bf80d80913dadb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"457e61003855648e9a7c8a8e3f79fc8825a4143913e2ce3048bf80d80913dadb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457e61003855648e9a7c8a8e3f79fc8825a4143913e2ce3048bf80d80913dadb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457e61003855648e9a7c8a8e3f79fc8825a4143913e2ce3048bf80d80913dadb"} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"457e61003855648e9a7c8a8e3f79fc8825a4143913e2ce3048bf80d80913dadb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457e61003855648e9a7c8a8e3f79fc8825a4143913e2ce3048bf80d80913dadb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"457e61003855648e9a7c8a8e3f79fc8825a4143913e2ce3048bf80d80913dadb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"457e61003855648e9a7c8a8e3f79fc8825a4143913e2ce3048bf80d80913dadb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457e61003855648e9a7c8a8e3f79fc8825a4143913e2ce3048bf80d80913dadb"} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"457e61003855648e9a7c8a8e3f79fc8825a4143913e2ce3048bf80d80913dadb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457e61003855648e9a7c8a8e3f79fc8825a4143913e2ce3048bf80d80913dadb"} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7"} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457e61003855648e9a7c8a8e3f79fc8825a4143913e2ce3048bf80d80913dadb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["457e61003855648e9a7c8a8e3f79fc8825a4143913e2ce3048bf80d80913dadb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"457e61003855648e9a7c8a8e3f79fc8825a4143913e2ce3048bf80d80913dadb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457e61003855648e9a7c8a8e3f79fc8825a4143913e2ce3048bf80d80913dadb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457e61003855648e9a7c8a8e3f79fc8825a4143913e2ce3048bf80d80913dadb"} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"457e61003855648e9a7c8a8e3f79fc8825a4143913e2ce3048bf80d80913dadb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"457e61003855648e9a7c8a8e3f79fc8825a4143913e2ce3048bf80d80913dadb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"457e61003855648e9a7c8a8e3f79fc8825a4143913e2ce3048bf80d80913dadb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457e61003855648e9a7c8a8e3f79fc8825a4143913e2ce3048bf80d80913dadb"} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457e61003855648e9a7c8a8e3f79fc8825a4143913e2ce3048bf80d80913dadb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["457e61003855648e9a7c8a8e3f79fc8825a4143913e2ce3048bf80d80913dadb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"457e61003855648e9a7c8a8e3f79fc8825a4143913e2ce3048bf80d80913dadb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457e61003855648e9a7c8a8e3f79fc8825a4143913e2ce3048bf80d80913dadb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"457e61003855648e9a7c8a8e3f79fc8825a4143913e2ce3048bf80d80913dadb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"457e61003855648e9a7c8a8e3f79fc8825a4143913e2ce3048bf80d80913dadb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"457e61003855648e9a7c8a8e3f79fc8825a4143913e2ce3048bf80d80913dadb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457e61003855648e9a7c8a8e3f79fc8825a4143913e2ce3048bf80d80913dadb"} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"457e61003855648e9a7c8a8e3f79fc8825a4143913e2ce3048bf80d80913dadb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457e61003855648e9a7c8a8e3f79fc8825a4143913e2ce3048bf80d80913dadb"} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"652cb22e2a3c3ab16fa495e895511a88d5f149163b88dbb10e9e0a64bf9bb63b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"652cb22e2a3c3ab16fa495e895511a88d5f149163b88dbb10e9e0a64bf9bb63b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457e61003855648e9a7c8a8e3f79fc8825a4143913e2ce3048bf80d80913dadb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["457e61003855648e9a7c8a8e3f79fc8825a4143913e2ce3048bf80d80913dadb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/652cb22e2a3c3ab16fa495e895511a88d5f149163b88dbb10e9e0a64bf9bb63b"} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"457e61003855648e9a7c8a8e3f79fc8825a4143913e2ce3048bf80d80913dadb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"652cb22e2a3c3ab16fa495e895511a88d5f149163b88dbb10e9e0a64bf9bb63b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"457e61003855648e9a7c8a8e3f79fc8825a4143913e2ce3048bf80d80913dadb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"652cb22e2a3c3ab16fa495e895511a88d5f149163b88dbb10e9e0a64bf9bb63b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/652cb22e2a3c3ab16fa495e895511a88d5f149163b88dbb10e9e0a64bf9bb63b"} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"652cb22e2a3c3ab16fa495e895511a88d5f149163b88dbb10e9e0a64bf9bb63b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["652cb22e2a3c3ab16fa495e895511a88d5f149163b88dbb10e9e0a64bf9bb63b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457e61003855648e9a7c8a8e3f79fc8825a4143913e2ce3048bf80d80913dadb"} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"652cb22e2a3c3ab16fa495e895511a88d5f149163b88dbb10e9e0a64bf9bb63b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"652cb22e2a3c3ab16fa495e895511a88d5f149163b88dbb10e9e0a64bf9bb63b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"652cb22e2a3c3ab16fa495e895511a88d5f149163b88dbb10e9e0a64bf9bb63b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"652cb22e2a3c3ab16fa495e895511a88d5f149163b88dbb10e9e0a64bf9bb63b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"652cb22e2a3c3ab16fa495e895511a88d5f149163b88dbb10e9e0a64bf9bb63b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/652cb22e2a3c3ab16fa495e895511a88d5f149163b88dbb10e9e0a64bf9bb63b"} {"level":"debug","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"652cb22e2a3c3ab16fa495e895511a88d5f149163b88dbb10e9e0a64bf9bb63b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/652cb22e2a3c3ab16fa495e895511a88d5f149163b88dbb10e9e0a64bf9bb63b"} {"level":"debug","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"652cb22e2a3c3ab16fa495e895511a88d5f149163b88dbb10e9e0a64bf9bb63b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["652cb22e2a3c3ab16fa495e895511a88d5f149163b88dbb10e9e0a64bf9bb63b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"652cb22e2a3c3ab16fa495e895511a88d5f149163b88dbb10e9e0a64bf9bb63b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"652cb22e2a3c3ab16fa495e895511a88d5f149163b88dbb10e9e0a64bf9bb63b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bee96021effce6242986a070a5c49e74f40f495421ae0f199456149bf538a42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/652cb22e2a3c3ab16fa495e895511a88d5f149163b88dbb10e9e0a64bf9bb63b"} {"level":"info","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bee96021effce6242986a070a5c49e74f40f495421ae0f199456149bf538a42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bee96021effce6242986a070a5c49e74f40f495421ae0f199456149bf538a42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bee96021effce6242986a070a5c49e74f40f495421ae0f199456149bf538a42"} {"level":"info","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bee96021effce6242986a070a5c49e74f40f495421ae0f199456149bf538a42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bee96021effce6242986a070a5c49e74f40f495421ae0f199456149bf538a42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0bee96021effce6242986a070a5c49e74f40f495421ae0f199456149bf538a42","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0bee96021effce6242986a070a5c49e74f40f495421ae0f199456149bf538a42\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bee96021effce6242986a070a5c49e74f40f495421ae0f199456149bf538a42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bee96021effce6242986a070a5c49e74f40f495421ae0f199456149bf538a42"} {"level":"debug","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bee96021effce6242986a070a5c49e74f40f495421ae0f199456149bf538a42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bee96021effce6242986a070a5c49e74f40f495421ae0f199456149bf538a42"} {"level":"debug","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bee96021effce6242986a070a5c49e74f40f495421ae0f199456149bf538a42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bee96021effce6242986a070a5c49e74f40f495421ae0f199456149bf538a42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bee96021effce6242986a070a5c49e74f40f495421ae0f199456149bf538a42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bee96021effce6242986a070a5c49e74f40f495421ae0f199456149bf538a42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bee96021effce6242986a070a5c49e74f40f495421ae0f199456149bf538a42"} {"level":"debug","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50cd58d4f854830f7161a7047f29dc03dddb17be4e6cab0d13b162faf6c69aa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50cd58d4f854830f7161a7047f29dc03dddb17be4e6cab0d13b162faf6c69aa0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50cd58d4f854830f7161a7047f29dc03dddb17be4e6cab0d13b162faf6c69aa0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50cd58d4f854830f7161a7047f29dc03dddb17be4e6cab0d13b162faf6c69aa0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50cd58d4f854830f7161a7047f29dc03dddb17be4e6cab0d13b162faf6c69aa0"} {"level":"debug","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50cd58d4f854830f7161a7047f29dc03dddb17be4e6cab0d13b162faf6c69aa0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50cd58d4f854830f7161a7047f29dc03dddb17be4e6cab0d13b162faf6c69aa0"} {"level":"debug","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50cd58d4f854830f7161a7047f29dc03dddb17be4e6cab0d13b162faf6c69aa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50cd58d4f854830f7161a7047f29dc03dddb17be4e6cab0d13b162faf6c69aa0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50cd58d4f854830f7161a7047f29dc03dddb17be4e6cab0d13b162faf6c69aa0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50cd58d4f854830f7161a7047f29dc03dddb17be4e6cab0d13b162faf6c69aa0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc8bcd477f17cd67bdb9c5387da96a6779b48a81f37ae74d6afc7ba71368b24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc8bcd477f17cd67bdb9c5387da96a6779b48a81f37ae74d6afc7ba71368b24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9466f78891c935c4247b95c4e7d45df730c586b0efae32b124439dad43778585","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50cd58d4f854830f7161a7047f29dc03dddb17be4e6cab0d13b162faf6c69aa0"} {"level":"info","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9466f78891c935c4247b95c4e7d45df730c586b0efae32b124439dad43778585","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc8bcd477f17cd67bdb9c5387da96a6779b48a81f37ae74d6afc7ba71368b24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc8bcd477f17cd67bdb9c5387da96a6779b48a81f37ae74d6afc7ba71368b24"} {"level":"info","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc8bcd477f17cd67bdb9c5387da96a6779b48a81f37ae74d6afc7ba71368b24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9466f78891c935c4247b95c4e7d45df730c586b0efae32b124439dad43778585","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9466f78891c935c4247b95c4e7d45df730c586b0efae32b124439dad43778585","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc8bcd477f17cd67bdb9c5387da96a6779b48a81f37ae74d6afc7ba71368b24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdc8bcd477f17cd67bdb9c5387da96a6779b48a81f37ae74d6afc7ba71368b24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9466f78891c935c4247b95c4e7d45df730c586b0efae32b124439dad43778585"} {"level":"info","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc8bcd477f17cd67bdb9c5387da96a6779b48a81f37ae74d6afc7ba71368b24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9466f78891c935c4247b95c4e7d45df730c586b0efae32b124439dad43778585","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9466f78891c935c4247b95c4e7d45df730c586b0efae32b124439dad43778585"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc8bcd477f17cd67bdb9c5387da96a6779b48a81f37ae74d6afc7ba71368b24"} {"level":"info","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9466f78891c935c4247b95c4e7d45df730c586b0efae32b124439dad43778585","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdc8bcd477f17cd67bdb9c5387da96a6779b48a81f37ae74d6afc7ba71368b24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9466f78891c935c4247b95c4e7d45df730c586b0efae32b124439dad43778585","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9466f78891c935c4247b95c4e7d45df730c586b0efae32b124439dad43778585","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9466f78891c935c4247b95c4e7d45df730c586b0efae32b124439dad43778585","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d0b62855450192267dfd12c11fb1767864a460c0ed6648f4304ea6a366c3700","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9466f78891c935c4247b95c4e7d45df730c586b0efae32b124439dad43778585"} {"level":"info","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d0b62855450192267dfd12c11fb1767864a460c0ed6648f4304ea6a366c3700","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9466f78891c935c4247b95c4e7d45df730c586b0efae32b124439dad43778585","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9466f78891c935c4247b95c4e7d45df730c586b0efae32b124439dad43778585"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9466f78891c935c4247b95c4e7d45df730c586b0efae32b124439dad43778585","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d0b62855450192267dfd12c11fb1767864a460c0ed6648f4304ea6a366c3700","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9466f78891c935c4247b95c4e7d45df730c586b0efae32b124439dad43778585","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc8bcd477f17cd67bdb9c5387da96a6779b48a81f37ae74d6afc7ba71368b24"} {"level":"debug","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d0b62855450192267dfd12c11fb1767864a460c0ed6648f4304ea6a366c3700","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d0b62855450192267dfd12c11fb1767864a460c0ed6648f4304ea6a366c3700","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d0b62855450192267dfd12c11fb1767864a460c0ed6648f4304ea6a366c3700","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d0b62855450192267dfd12c11fb1767864a460c0ed6648f4304ea6a366c3700"} {"level":"debug","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d0b62855450192267dfd12c11fb1767864a460c0ed6648f4304ea6a366c3700","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d0b62855450192267dfd12c11fb1767864a460c0ed6648f4304ea6a366c3700"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d0b62855450192267dfd12c11fb1767864a460c0ed6648f4304ea6a366c3700","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9466f78891c935c4247b95c4e7d45df730c586b0efae32b124439dad43778585"} {"level":"debug","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d0b62855450192267dfd12c11fb1767864a460c0ed6648f4304ea6a366c3700","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d0b62855450192267dfd12c11fb1767864a460c0ed6648f4304ea6a366c3700","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d0b62855450192267dfd12c11fb1767864a460c0ed6648f4304ea6a366c3700","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d0b62855450192267dfd12c11fb1767864a460c0ed6648f4304ea6a366c3700","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d0b62855450192267dfd12c11fb1767864a460c0ed6648f4304ea6a366c3700","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d0b62855450192267dfd12c11fb1767864a460c0ed6648f4304ea6a366c3700"} {"level":"info","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d0b62855450192267dfd12c11fb1767864a460c0ed6648f4304ea6a366c3700"} {"level":"debug","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d0b62855450192267dfd12c11fb1767864a460c0ed6648f4304ea6a366c3700","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d0b62855450192267dfd12c11fb1767864a460c0ed6648f4304ea6a366c3700"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d0b62855450192267dfd12c11fb1767864a460c0ed6648f4304ea6a366c3700","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d0b62855450192267dfd12c11fb1767864a460c0ed6648f4304ea6a366c3700","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d0b62855450192267dfd12c11fb1767864a460c0ed6648f4304ea6a366c3700"} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed3652b30e73bd46da926f5aee4c3651cbc5354a3d6054a91bc9e11c5f60c5d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed3652b30e73bd46da926f5aee4c3651cbc5354a3d6054a91bc9e11c5f60c5d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed3652b30e73bd46da926f5aee4c3651cbc5354a3d6054a91bc9e11c5f60c5d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed3652b30e73bd46da926f5aee4c3651cbc5354a3d6054a91bc9e11c5f60c5d1"} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed3652b30e73bd46da926f5aee4c3651cbc5354a3d6054a91bc9e11c5f60c5d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed3652b30e73bd46da926f5aee4c3651cbc5354a3d6054a91bc9e11c5f60c5d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ed3652b30e73bd46da926f5aee4c3651cbc5354a3d6054a91bc9e11c5f60c5d1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ed3652b30e73bd46da926f5aee4c3651cbc5354a3d6054a91bc9e11c5f60c5d1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed3652b30e73bd46da926f5aee4c3651cbc5354a3d6054a91bc9e11c5f60c5d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed3652b30e73bd46da926f5aee4c3651cbc5354a3d6054a91bc9e11c5f60c5d1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed3652b30e73bd46da926f5aee4c3651cbc5354a3d6054a91bc9e11c5f60c5d1"} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed3652b30e73bd46da926f5aee4c3651cbc5354a3d6054a91bc9e11c5f60c5d1"} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d565e26a4ccc0f0f15b3665ae6a2f24b6a50518edc4c6dfc5c4ced1ba57befb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d565e26a4ccc0f0f15b3665ae6a2f24b6a50518edc4c6dfc5c4ced1ba57befb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d565e26a4ccc0f0f15b3665ae6a2f24b6a50518edc4c6dfc5c4ced1ba57befb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed3652b30e73bd46da926f5aee4c3651cbc5354a3d6054a91bc9e11c5f60c5d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed3652b30e73bd46da926f5aee4c3651cbc5354a3d6054a91bc9e11c5f60c5d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d565e26a4ccc0f0f15b3665ae6a2f24b6a50518edc4c6dfc5c4ced1ba57befb"} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed3652b30e73bd46da926f5aee4c3651cbc5354a3d6054a91bc9e11c5f60c5d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d565e26a4ccc0f0f15b3665ae6a2f24b6a50518edc4c6dfc5c4ced1ba57befb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed3652b30e73bd46da926f5aee4c3651cbc5354a3d6054a91bc9e11c5f60c5d1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d565e26a4ccc0f0f15b3665ae6a2f24b6a50518edc4c6dfc5c4ced1ba57befb"} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d565e26a4ccc0f0f15b3665ae6a2f24b6a50518edc4c6dfc5c4ced1ba57befb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d565e26a4ccc0f0f15b3665ae6a2f24b6a50518edc4c6dfc5c4ced1ba57befb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d565e26a4ccc0f0f15b3665ae6a2f24b6a50518edc4c6dfc5c4ced1ba57befb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d565e26a4ccc0f0f15b3665ae6a2f24b6a50518edc4c6dfc5c4ced1ba57befb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed3652b30e73bd46da926f5aee4c3651cbc5354a3d6054a91bc9e11c5f60c5d1"} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d565e26a4ccc0f0f15b3665ae6a2f24b6a50518edc4c6dfc5c4ced1ba57befb"} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca"} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca"} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca"} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a320219785fe7564353033e888471b6657d51d20a1d52d08094417f07f763a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a320219785fe7564353033e888471b6657d51d20a1d52d08094417f07f763a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a320219785fe7564353033e888471b6657d51d20a1d52d08094417f07f763a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a320219785fe7564353033e888471b6657d51d20a1d52d08094417f07f763a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a320219785fe7564353033e888471b6657d51d20a1d52d08094417f07f763a5"} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a320219785fe7564353033e888471b6657d51d20a1d52d08094417f07f763a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a320219785fe7564353033e888471b6657d51d20a1d52d08094417f07f763a5"} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca"} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a320219785fe7564353033e888471b6657d51d20a1d52d08094417f07f763a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a320219785fe7564353033e888471b6657d51d20a1d52d08094417f07f763a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a320219785fe7564353033e888471b6657d51d20a1d52d08094417f07f763a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a320219785fe7564353033e888471b6657d51d20a1d52d08094417f07f763a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fa1841fae295e98e2e2e6fe9bd390034385146700e72438f3da9772d802309d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca"} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fa1841fae295e98e2e2e6fe9bd390034385146700e72438f3da9772d802309d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fa1841fae295e98e2e2e6fe9bd390034385146700e72438f3da9772d802309d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fa1841fae295e98e2e2e6fe9bd390034385146700e72438f3da9772d802309d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a320219785fe7564353033e888471b6657d51d20a1d52d08094417f07f763a5"} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fa1841fae295e98e2e2e6fe9bd390034385146700e72438f3da9772d802309d"} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fa1841fae295e98e2e2e6fe9bd390034385146700e72438f3da9772d802309d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fa1841fae295e98e2e2e6fe9bd390034385146700e72438f3da9772d802309d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fa1841fae295e98e2e2e6fe9bd390034385146700e72438f3da9772d802309d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca"} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fa1841fae295e98e2e2e6fe9bd390034385146700e72438f3da9772d802309d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fa1841fae295e98e2e2e6fe9bd390034385146700e72438f3da9772d802309d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fa1841fae295e98e2e2e6fe9bd390034385146700e72438f3da9772d802309d"} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fa1841fae295e98e2e2e6fe9bd390034385146700e72438f3da9772d802309d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fa1841fae295e98e2e2e6fe9bd390034385146700e72438f3da9772d802309d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fa1841fae295e98e2e2e6fe9bd390034385146700e72438f3da9772d802309d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63cde84975d26dd74e92b09a78622f7af30901525dda224797cb933c6114c855","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca"} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63cde84975d26dd74e92b09a78622f7af30901525dda224797cb933c6114c855","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fa1841fae295e98e2e2e6fe9bd390034385146700e72438f3da9772d802309d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fa1841fae295e98e2e2e6fe9bd390034385146700e72438f3da9772d802309d"} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fa1841fae295e98e2e2e6fe9bd390034385146700e72438f3da9772d802309d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63cde84975d26dd74e92b09a78622f7af30901525dda224797cb933c6114c855","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63cde84975d26dd74e92b09a78622f7af30901525dda224797cb933c6114c855","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fa1841fae295e98e2e2e6fe9bd390034385146700e72438f3da9772d802309d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fa1841fae295e98e2e2e6fe9bd390034385146700e72438f3da9772d802309d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63cde84975d26dd74e92b09a78622f7af30901525dda224797cb933c6114c855"} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fa1841fae295e98e2e2e6fe9bd390034385146700e72438f3da9772d802309d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63cde84975d26dd74e92b09a78622f7af30901525dda224797cb933c6114c855","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63cde84975d26dd74e92b09a78622f7af30901525dda224797cb933c6114c855"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63cde84975d26dd74e92b09a78622f7af30901525dda224797cb933c6114c855","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fa1841fae295e98e2e2e6fe9bd390034385146700e72438f3da9772d802309d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca"} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63cde84975d26dd74e92b09a78622f7af30901525dda224797cb933c6114c855","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fa1841fae295e98e2e2e6fe9bd390034385146700e72438f3da9772d802309d"} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63cde84975d26dd74e92b09a78622f7af30901525dda224797cb933c6114c855"} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7be486aabf099e6713c041de0a650c7e5417f69a4989f56393ce2f403cc4e90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7be486aabf099e6713c041de0a650c7e5417f69a4989f56393ce2f403cc4e90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7be486aabf099e6713c041de0a650c7e5417f69a4989f56393ce2f403cc4e90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7be486aabf099e6713c041de0a650c7e5417f69a4989f56393ce2f403cc4e90","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7be486aabf099e6713c041de0a650c7e5417f69a4989f56393ce2f403cc4e90"} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7be486aabf099e6713c041de0a650c7e5417f69a4989f56393ce2f403cc4e90","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7be486aabf099e6713c041de0a650c7e5417f69a4989f56393ce2f403cc4e90"} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7be486aabf099e6713c041de0a650c7e5417f69a4989f56393ce2f403cc4e90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7be486aabf099e6713c041de0a650c7e5417f69a4989f56393ce2f403cc4e90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7be486aabf099e6713c041de0a650c7e5417f69a4989f56393ce2f403cc4e90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7be486aabf099e6713c041de0a650c7e5417f69a4989f56393ce2f403cc4e90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7be486aabf099e6713c041de0a650c7e5417f69a4989f56393ce2f403cc4e90"} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882"} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882"} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882"} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882"} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882"} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882"} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882"} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882"} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882"} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882"} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882"} {"level":"debug","ts":"2026-07-02T19:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d565e26a4ccc0f0f15b3665ae6a2f24b6a50518edc4c6dfc5c4ced1ba57befb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d565e26a4ccc0f0f15b3665ae6a2f24b6a50518edc4c6dfc5c4ced1ba57befb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d565e26a4ccc0f0f15b3665ae6a2f24b6a50518edc4c6dfc5c4ced1ba57befb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d565e26a4ccc0f0f15b3665ae6a2f24b6a50518edc4c6dfc5c4ced1ba57befb"} {"level":"debug","ts":"2026-07-02T19:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d565e26a4ccc0f0f15b3665ae6a2f24b6a50518edc4c6dfc5c4ced1ba57befb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d565e26a4ccc0f0f15b3665ae6a2f24b6a50518edc4c6dfc5c4ced1ba57befb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d565e26a4ccc0f0f15b3665ae6a2f24b6a50518edc4c6dfc5c4ced1ba57befb"} {"level":"debug","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d565e26a4ccc0f0f15b3665ae6a2f24b6a50518edc4c6dfc5c4ced1ba57befb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d565e26a4ccc0f0f15b3665ae6a2f24b6a50518edc4c6dfc5c4ced1ba57befb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d565e26a4ccc0f0f15b3665ae6a2f24b6a50518edc4c6dfc5c4ced1ba57befb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63cde84975d26dd74e92b09a78622f7af30901525dda224797cb933c6114c855","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63cde84975d26dd74e92b09a78622f7af30901525dda224797cb933c6114c855","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d565e26a4ccc0f0f15b3665ae6a2f24b6a50518edc4c6dfc5c4ced1ba57befb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63cde84975d26dd74e92b09a78622f7af30901525dda224797cb933c6114c855","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63cde84975d26dd74e92b09a78622f7af30901525dda224797cb933c6114c855"} {"level":"debug","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63cde84975d26dd74e92b09a78622f7af30901525dda224797cb933c6114c855","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63cde84975d26dd74e92b09a78622f7af30901525dda224797cb933c6114c855"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63cde84975d26dd74e92b09a78622f7af30901525dda224797cb933c6114c855","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63cde84975d26dd74e92b09a78622f7af30901525dda224797cb933c6114c855","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d565e26a4ccc0f0f15b3665ae6a2f24b6a50518edc4c6dfc5c4ced1ba57befb"} {"level":"info","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63cde84975d26dd74e92b09a78622f7af30901525dda224797cb933c6114c855"} {"level":"debug","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7"} {"level":"debug","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7"} {"level":"debug","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7"} {"level":"debug","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7"} {"level":"debug","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef93b9e82af1d5de37dfc31e29a3e497351ad0345605a42708839748b02e907f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7"} {"level":"debug","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef93b9e82af1d5de37dfc31e29a3e497351ad0345605a42708839748b02e907f"} {"level":"info","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7"} {"level":"info","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7"} {"level":"debug","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7"} {"level":"debug","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7"} {"level":"info","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bee96021effce6242986a070a5c49e74f40f495421ae0f199456149bf538a42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7"} {"level":"debug","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bee96021effce6242986a070a5c49e74f40f495421ae0f199456149bf538a42"} {"level":"info","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7"} {"level":"debug","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed3652b30e73bd46da926f5aee4c3651cbc5354a3d6054a91bc9e11c5f60c5d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed3652b30e73bd46da926f5aee4c3651cbc5354a3d6054a91bc9e11c5f60c5d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed3652b30e73bd46da926f5aee4c3651cbc5354a3d6054a91bc9e11c5f60c5d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed3652b30e73bd46da926f5aee4c3651cbc5354a3d6054a91bc9e11c5f60c5d1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed3652b30e73bd46da926f5aee4c3651cbc5354a3d6054a91bc9e11c5f60c5d1"} {"level":"debug","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed3652b30e73bd46da926f5aee4c3651cbc5354a3d6054a91bc9e11c5f60c5d1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed3652b30e73bd46da926f5aee4c3651cbc5354a3d6054a91bc9e11c5f60c5d1"} {"level":"debug","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed3652b30e73bd46da926f5aee4c3651cbc5354a3d6054a91bc9e11c5f60c5d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed3652b30e73bd46da926f5aee4c3651cbc5354a3d6054a91bc9e11c5f60c5d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed3652b30e73bd46da926f5aee4c3651cbc5354a3d6054a91bc9e11c5f60c5d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed3652b30e73bd46da926f5aee4c3651cbc5354a3d6054a91bc9e11c5f60c5d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50cd58d4f854830f7161a7047f29dc03dddb17be4e6cab0d13b162faf6c69aa0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed3652b30e73bd46da926f5aee4c3651cbc5354a3d6054a91bc9e11c5f60c5d1"} {"level":"info","ts":"2026-07-02T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50cd58d4f854830f7161a7047f29dc03dddb17be4e6cab0d13b162faf6c69aa0"} {"level":"debug","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fa1841fae295e98e2e2e6fe9bd390034385146700e72438f3da9772d802309d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"457e61003855648e9a7c8a8e3f79fc8825a4143913e2ce3048bf80d80913dadb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fa1841fae295e98e2e2e6fe9bd390034385146700e72438f3da9772d802309d"} {"level":"info","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457e61003855648e9a7c8a8e3f79fc8825a4143913e2ce3048bf80d80913dadb"} {"level":"debug","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a320219785fe7564353033e888471b6657d51d20a1d52d08094417f07f763a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a320219785fe7564353033e888471b6657d51d20a1d52d08094417f07f763a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a320219785fe7564353033e888471b6657d51d20a1d52d08094417f07f763a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a320219785fe7564353033e888471b6657d51d20a1d52d08094417f07f763a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a320219785fe7564353033e888471b6657d51d20a1d52d08094417f07f763a5"} {"level":"debug","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a320219785fe7564353033e888471b6657d51d20a1d52d08094417f07f763a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a320219785fe7564353033e888471b6657d51d20a1d52d08094417f07f763a5"} {"level":"debug","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a320219785fe7564353033e888471b6657d51d20a1d52d08094417f07f763a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a320219785fe7564353033e888471b6657d51d20a1d52d08094417f07f763a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a320219785fe7564353033e888471b6657d51d20a1d52d08094417f07f763a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d0b62855450192267dfd12c11fb1767864a460c0ed6648f4304ea6a366c3700","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d0b62855450192267dfd12c11fb1767864a460c0ed6648f4304ea6a366c3700","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a320219785fe7564353033e888471b6657d51d20a1d52d08094417f07f763a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d0b62855450192267dfd12c11fb1767864a460c0ed6648f4304ea6a366c3700","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d0b62855450192267dfd12c11fb1767864a460c0ed6648f4304ea6a366c3700"} {"level":"debug","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d0b62855450192267dfd12c11fb1767864a460c0ed6648f4304ea6a366c3700","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d0b62855450192267dfd12c11fb1767864a460c0ed6648f4304ea6a366c3700"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d0b62855450192267dfd12c11fb1767864a460c0ed6648f4304ea6a366c3700","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d0b62855450192267dfd12c11fb1767864a460c0ed6648f4304ea6a366c3700","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a320219785fe7564353033e888471b6657d51d20a1d52d08094417f07f763a5"} {"level":"info","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d0b62855450192267dfd12c11fb1767864a460c0ed6648f4304ea6a366c3700"} {"level":"debug","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7be486aabf099e6713c041de0a650c7e5417f69a4989f56393ce2f403cc4e90","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7be486aabf099e6713c041de0a650c7e5417f69a4989f56393ce2f403cc4e90"} {"level":"debug","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9466f78891c935c4247b95c4e7d45df730c586b0efae32b124439dad43778585","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca"} {"level":"debug","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9466f78891c935c4247b95c4e7d45df730c586b0efae32b124439dad43778585"} {"level":"info","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca"} {"level":"info","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca"} {"level":"debug","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdc8bcd477f17cd67bdb9c5387da96a6779b48a81f37ae74d6afc7ba71368b24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca"} {"level":"debug","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc8bcd477f17cd67bdb9c5387da96a6779b48a81f37ae74d6afc7ba71368b24"} {"level":"info","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"652cb22e2a3c3ab16fa495e895511a88d5f149163b88dbb10e9e0a64bf9bb63b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4"} {"level":"debug","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882"} {"level":"info","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/652cb22e2a3c3ab16fa495e895511a88d5f149163b88dbb10e9e0a64bf9bb63b"} {"level":"info","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca"} {"level":"info","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201"} {"level":"info","ts":"2026-07-02T19:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132"} {"level":"info","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2dd0fd72-65ab-4080-abbc-798c0d37ed2e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:53548","PortSpecifier":{"PortValue":53548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2dd0fd72-65ab-4080-abbc-798c0d37ed2e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2dd0fd72-65ab-4080-abbc-798c0d37ed2e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:53548","PortSpecifier":{"PortValue":53548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021438,"nanos":475670862},"http":{"id":"2dd0fd72-65ab-4080-abbc-798c0d37ed2e","method":"POST","headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2dd0fd72-65ab-4080-abbc-798c0d37ed2e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2dd0fd72-65ab-4080-abbc-798c0d37ed2e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"478a9049-7589-4443-b6b2-6a4e0000802d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"]}} {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2dd0fd72-65ab-4080-abbc-798c0d37ed2e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"478a9049-7589-4443-b6b2-6a4e0000802d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2dd0fd72-65ab-4080-abbc-798c0d37ed2e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2dd0fd72-65ab-4080-abbc-798c0d37ed2e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2dd0fd72-65ab-4080-abbc-798c0d37ed2e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4a101a/sub-test-model-4a101a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2dd0fd72-65ab-4080-abbc-798c0d37ed2e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2dd0fd72-65ab-4080-abbc-798c0d37ed2e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2dd0fd72-65ab-4080-abbc-798c0d37ed2e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2dd0fd72-65ab-4080-abbc-798c0d37ed2e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2dd0fd72-65ab-4080-abbc-798c0d37ed2e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a19d819e-5ce5-4a06-9b4d-1c9c5d752fe9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54530","PortSpecifier":{"PortValue":54530}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a19d819e-5ce5-4a06-9b4d-1c9c5d752fe9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a19d819e-5ce5-4a06-9b4d-1c9c5d752fe9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54530","PortSpecifier":{"PortValue":54530}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021438,"nanos":518803720},"http":{"id":"a19d819e-5ce5-4a06-9b4d-1c9c5d752fe9","method":"POST","headers":{":authority":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a19d819e-5ce5-4a06-9b4d-1c9c5d752fe9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a19d819e-5ce5-4a06-9b4d-1c9c5d752fe9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"478a9049-7589-4443-b6b2-6a4e0000802d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"]}} {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a19d819e-5ce5-4a06-9b4d-1c9c5d752fe9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"478a9049-7589-4443-b6b2-6a4e0000802d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a19d819e-5ce5-4a06-9b4d-1c9c5d752fe9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a19d819e-5ce5-4a06-9b4d-1c9c5d752fe9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a19d819e-5ce5-4a06-9b4d-1c9c5d752fe9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f80343/sub-test-model-f80343\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a19d819e-5ce5-4a06-9b4d-1c9c5d752fe9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a19d819e-5ce5-4a06-9b4d-1c9c5d752fe9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a19d819e-5ce5-4a06-9b4d-1c9c5d752fe9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a19d819e-5ce5-4a06-9b4d-1c9c5d752fe9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a19d819e-5ce5-4a06-9b4d-1c9c5d752fe9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a16a218b-59b5-41e5-b998-954a5efaafa3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:53560","PortSpecifier":{"PortValue":53560}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a16a218b-59b5-41e5-b998-954a5efaafa3","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a16a218b-59b5-41e5-b998-954a5efaafa3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:53560","PortSpecifier":{"PortValue":53560}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021438,"nanos":561707066},"http":{"id":"a16a218b-59b5-41e5-b998-954a5efaafa3","method":"GET","headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a16a218b-59b5-41e5-b998-954a5efaafa3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-9MnzlFLxtIVHJZOn_hTWl2YPZlEOvTnCoRGJznssfsun02TyL8kls206sT4J"} {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a16a218b-59b5-41e5-b998-954a5efaafa3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-9MnzlFLxtIVHJZOn_hTWl2YPZlEOvTnCoRGJznssfsun02TyL8kls206sT4J\"}"} {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a16a218b-59b5-41e5-b998-954a5efaafa3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"aff042eb-a390-4dd3-a983-55e19c4aa0c3","keyName":"e2e-sub-iso-3332f9","subscription":"e2e-a-only-0b86fb","tenant":"e2e-shared-a-4a101a","userId":"aff042eb-a390-4dd3-a983-55e19c4aa0c3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a16a218b-59b5-41e5-b998-954a5efaafa3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a16a218b-59b5-41e5-b998-954a5efaafa3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a16a218b-59b5-41e5-b998-954a5efaafa3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a16a218b-59b5-41e5-b998-954a5efaafa3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4a101a/sub-test-model-4a101a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a16a218b-59b5-41e5-b998-954a5efaafa3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a16a218b-59b5-41e5-b998-954a5efaafa3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a16a218b-59b5-41e5-b998-954a5efaafa3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-0b86fb"} {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a16a218b-59b5-41e5-b998-954a5efaafa3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a16a218b-59b5-41e5-b998-954a5efaafa3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a16a218b-59b5-41e5-b998-954a5efaafa3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e536fe51-850a-4ce4-8695-d4ca5a948b89","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54540","PortSpecifier":{"PortValue":54540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e536fe51-850a-4ce4-8695-d4ca5a948b89","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e536fe51-850a-4ce4-8695-d4ca5a948b89","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54540","PortSpecifier":{"PortValue":54540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021438,"nanos":606314973},"http":{"id":"e536fe51-850a-4ce4-8695-d4ca5a948b89","method":"GET","headers":{":authority":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e536fe51-850a-4ce4-8695-d4ca5a948b89","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-R6vtxQkWU3MxoLC7_2JolsgR9iTKESNE5Czr6oG18CK2meFNaxMGstXlJdg5"} {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e536fe51-850a-4ce4-8695-d4ca5a948b89","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f80343.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-R6vtxQkWU3MxoLC7_2JolsgR9iTKESNE5Czr6oG18CK2meFNaxMGstXlJdg5\"}"} {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e536fe51-850a-4ce4-8695-d4ca5a948b89","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f80343.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3ccb6ca9-b663-41df-88f0-6fb77bc857c1","keyName":"e2e-sub-iso-a20094","subscription":"e2e-b-only-0b86fb","tenant":"e2e-shared-b-f80343","userId":"3ccb6ca9-b663-41df-88f0-6fb77bc857c1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e536fe51-850a-4ce4-8695-d4ca5a948b89","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e536fe51-850a-4ce4-8695-d4ca5a948b89","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e536fe51-850a-4ce4-8695-d4ca5a948b89","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e536fe51-850a-4ce4-8695-d4ca5a948b89","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f80343/sub-test-model-f80343\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e536fe51-850a-4ce4-8695-d4ca5a948b89","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e536fe51-850a-4ce4-8695-d4ca5a948b89","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-0b86fb"} {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e536fe51-850a-4ce4-8695-d4ca5a948b89","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e536fe51-850a-4ce4-8695-d4ca5a948b89","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e536fe51-850a-4ce4-8695-d4ca5a948b89","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:43:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e536fe51-850a-4ce4-8695-d4ca5a948b89","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1e37f83-769c-49ea-8af2-10aa72ceb166","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49388","PortSpecifier":{"PortValue":49388}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b1e37f83-769c-49ea-8af2-10aa72ceb166","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1e37f83-769c-49ea-8af2-10aa72ceb166","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49388","PortSpecifier":{"PortValue":49388}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021454,"nanos":880554311},"http":{"id":"b1e37f83-769c-49ea-8af2-10aa72ceb166","method":"POST","headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b1e37f83-769c-49ea-8af2-10aa72ceb166","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b1e37f83-769c-49ea-8af2-10aa72ceb166","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"478a9049-7589-4443-b6b2-6a4e0000802d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"]}} {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b1e37f83-769c-49ea-8af2-10aa72ceb166","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"478a9049-7589-4443-b6b2-6a4e0000802d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1e37f83-769c-49ea-8af2-10aa72ceb166","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1e37f83-769c-49ea-8af2-10aa72ceb166","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1e37f83-769c-49ea-8af2-10aa72ceb166","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4a101a/sub-test-model-4a101a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b1e37f83-769c-49ea-8af2-10aa72ceb166","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1e37f83-769c-49ea-8af2-10aa72ceb166","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1e37f83-769c-49ea-8af2-10aa72ceb166","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1e37f83-769c-49ea-8af2-10aa72ceb166","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1e37f83-769c-49ea-8af2-10aa72ceb166","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69951881-356d-49b9-8740-78ca0dc82de7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55398","PortSpecifier":{"PortValue":55398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"69951881-356d-49b9-8740-78ca0dc82de7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69951881-356d-49b9-8740-78ca0dc82de7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55398","PortSpecifier":{"PortValue":55398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021454,"nanos":914359654},"http":{"id":"69951881-356d-49b9-8740-78ca0dc82de7","method":"POST","headers":{":authority":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"69951881-356d-49b9-8740-78ca0dc82de7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"69951881-356d-49b9-8740-78ca0dc82de7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"478a9049-7589-4443-b6b2-6a4e0000802d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"]}} {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"69951881-356d-49b9-8740-78ca0dc82de7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"478a9049-7589-4443-b6b2-6a4e0000802d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69951881-356d-49b9-8740-78ca0dc82de7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69951881-356d-49b9-8740-78ca0dc82de7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69951881-356d-49b9-8740-78ca0dc82de7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f80343/sub-test-model-f80343\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"69951881-356d-49b9-8740-78ca0dc82de7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69951881-356d-49b9-8740-78ca0dc82de7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69951881-356d-49b9-8740-78ca0dc82de7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69951881-356d-49b9-8740-78ca0dc82de7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69951881-356d-49b9-8740-78ca0dc82de7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a81a0b6-a409-4fbe-ae9d-58c3440239d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49398","PortSpecifier":{"PortValue":49398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7a81a0b6-a409-4fbe-ae9d-58c3440239d6","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a81a0b6-a409-4fbe-ae9d-58c3440239d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49398","PortSpecifier":{"PortValue":49398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021454,"nanos":952613230},"http":{"id":"7a81a0b6-a409-4fbe-ae9d-58c3440239d6","method":"POST","headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7a81a0b6-a409-4fbe-ae9d-58c3440239d6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16XcOUepacm25fRD3_voy6pwaYMkiYmYYlP0ikDvWfEupAg54T5xcR26MaKKY"} {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7a81a0b6-a409-4fbe-ae9d-58c3440239d6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16XcOUepacm25fRD3_voy6pwaYMkiYmYYlP0ikDvWfEupAg54T5xcR26MaKKY\"}"} {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7a81a0b6-a409-4fbe-ae9d-58c3440239d6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ffddc472-91c7-4cfd-9c76-789f756a680a","keyName":"e2e-sub-iso-5596b5","subscription":"e2e-shared-sub-e40b71","tenant":"e2e-shared-a-4a101a","userId":"ffddc472-91c7-4cfd-9c76-789f756a680a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7a81a0b6-a409-4fbe-ae9d-58c3440239d6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a81a0b6-a409-4fbe-ae9d-58c3440239d6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a81a0b6-a409-4fbe-ae9d-58c3440239d6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a81a0b6-a409-4fbe-ae9d-58c3440239d6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4a101a/sub-test-model-4a101a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7a81a0b6-a409-4fbe-ae9d-58c3440239d6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a81a0b6-a409-4fbe-ae9d-58c3440239d6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-e40b71"} {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a81a0b6-a409-4fbe-ae9d-58c3440239d6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a81a0b6-a409-4fbe-ae9d-58c3440239d6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a81a0b6-a409-4fbe-ae9d-58c3440239d6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a81a0b6-a409-4fbe-ae9d-58c3440239d6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e429f69a-5193-465e-ae39-b4376c044c4f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55412","PortSpecifier":{"PortValue":55412}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e429f69a-5193-465e-ae39-b4376c044c4f","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e429f69a-5193-465e-ae39-b4376c044c4f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55412","PortSpecifier":{"PortValue":55412}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021454,"nanos":982967381},"http":{"id":"e429f69a-5193-465e-ae39-b4376c044c4f","method":"POST","headers":{":authority":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e429f69a-5193-465e-ae39-b4376c044c4f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1C10nfE0n5JeA1abD_KZQ5kHSRcVyc91dyYGMwktwF35cE9nohutz1lZh1hf3"} {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e429f69a-5193-465e-ae39-b4376c044c4f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f80343.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1C10nfE0n5JeA1abD_KZQ5kHSRcVyc91dyYGMwktwF35cE9nohutz1lZh1hf3\"}"} {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e429f69a-5193-465e-ae39-b4376c044c4f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f80343.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f369615e-bfc1-4b01-a9d1-ee5c93f40023","keyName":"e2e-sub-iso-cbeb65","subscription":"e2e-shared-sub-e40b71","tenant":"e2e-shared-b-f80343","userId":"f369615e-bfc1-4b01-a9d1-ee5c93f40023","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e429f69a-5193-465e-ae39-b4376c044c4f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e429f69a-5193-465e-ae39-b4376c044c4f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e429f69a-5193-465e-ae39-b4376c044c4f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e429f69a-5193-465e-ae39-b4376c044c4f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f80343/sub-test-model-f80343\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e429f69a-5193-465e-ae39-b4376c044c4f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e429f69a-5193-465e-ae39-b4376c044c4f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-e40b71"} {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e429f69a-5193-465e-ae39-b4376c044c4f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e429f69a-5193-465e-ae39-b4376c044c4f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e429f69a-5193-465e-ae39-b4376c044c4f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:44:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e429f69a-5193-465e-ae39-b4376c044c4f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d0b62855450192267dfd12c11fb1767864a460c0ed6648f4304ea6a366c3700"} {"level":"info","ts":"2026-07-02T19:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63cde84975d26dd74e92b09a78622f7af30901525dda224797cb933c6114c855"} {"level":"info","ts":"2026-07-02T19:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9466f78891c935c4247b95c4e7d45df730c586b0efae32b124439dad43778585"} {"level":"info","ts":"2026-07-02T19:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/457e61003855648e9a7c8a8e3f79fc8825a4143913e2ce3048bf80d80913dadb"} {"level":"info","ts":"2026-07-02T19:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/224822ebc1bfe81715024009a2f27abdaec67b98febc5ac59f2212b995edc882"} {"level":"info","ts":"2026-07-02T19:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1fa1841fae295e98e2e2e6fe9bd390034385146700e72438f3da9772d802309d"} {"level":"info","ts":"2026-07-02T19:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5843245084f0ca8089ab06d8f07895777e57e2d4c5b4a1b5a7611137fb8c8e7"} {"level":"info","ts":"2026-07-02T19:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a320219785fe7564353033e888471b6657d51d20a1d52d08094417f07f763a5"} {"level":"info","ts":"2026-07-02T19:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0bee96021effce6242986a070a5c49e74f40f495421ae0f199456149bf538a42"} {"level":"info","ts":"2026-07-02T19:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50cd58d4f854830f7161a7047f29dc03dddb17be4e6cab0d13b162faf6c69aa0"} {"level":"info","ts":"2026-07-02T19:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d565e26a4ccc0f0f15b3665ae6a2f24b6a50518edc4c6dfc5c4ced1ba57befb"} {"level":"info","ts":"2026-07-02T19:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e7be486aabf099e6713c041de0a650c7e5417f69a4989f56393ce2f403cc4e90"} {"level":"info","ts":"2026-07-02T19:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d310f698a447713671c0b9c5bea3d84012287546cc6fc138c9649e7169b728ca"} {"level":"info","ts":"2026-07-02T19:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fdc8bcd477f17cd67bdb9c5387da96a6779b48a81f37ae74d6afc7ba71368b24"} {"level":"info","ts":"2026-07-02T19:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/652cb22e2a3c3ab16fa495e895511a88d5f149163b88dbb10e9e0a64bf9bb63b"} {"level":"info","ts":"2026-07-02T19:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed3652b30e73bd46da926f5aee4c3651cbc5354a3d6054a91bc9e11c5f60c5d1"} {"level":"debug","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c51b6fb534e76e8ffdf85855402d1cea4bc74f5a41996f3570ad89f47f9064f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c51b6fb534e76e8ffdf85855402d1cea4bc74f5a41996f3570ad89f47f9064f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c51b6fb534e76e8ffdf85855402d1cea4bc74f5a41996f3570ad89f47f9064f2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c51b6fb534e76e8ffdf85855402d1cea4bc74f5a41996f3570ad89f47f9064f2"} {"level":"debug","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c51b6fb534e76e8ffdf85855402d1cea4bc74f5a41996f3570ad89f47f9064f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c51b6fb534e76e8ffdf85855402d1cea4bc74f5a41996f3570ad89f47f9064f2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c51b6fb534e76e8ffdf85855402d1cea4bc74f5a41996f3570ad89f47f9064f2"} {"level":"debug","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c51b6fb534e76e8ffdf85855402d1cea4bc74f5a41996f3570ad89f47f9064f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c51b6fb534e76e8ffdf85855402d1cea4bc74f5a41996f3570ad89f47f9064f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c51b6fb534e76e8ffdf85855402d1cea4bc74f5a41996f3570ad89f47f9064f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44ff4044a0a2cbd01f12552e7fa0ccfcb977e77a93613d92fd840a7899fe693d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44ff4044a0a2cbd01f12552e7fa0ccfcb977e77a93613d92fd840a7899fe693d"} {"level":"info","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44ff4044a0a2cbd01f12552e7fa0ccfcb977e77a93613d92fd840a7899fe693d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c51b6fb534e76e8ffdf85855402d1cea4bc74f5a41996f3570ad89f47f9064f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c51b6fb534e76e8ffdf85855402d1cea4bc74f5a41996f3570ad89f47f9064f2"} {"level":"info","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44ff4044a0a2cbd01f12552e7fa0ccfcb977e77a93613d92fd840a7899fe693d"} {"level":"info","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c51b6fb534e76e8ffdf85855402d1cea4bc74f5a41996f3570ad89f47f9064f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44ff4044a0a2cbd01f12552e7fa0ccfcb977e77a93613d92fd840a7899fe693d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44ff4044a0a2cbd01f12552e7fa0ccfcb977e77a93613d92fd840a7899fe693d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c51b6fb534e76e8ffdf85855402d1cea4bc74f5a41996f3570ad89f47f9064f2"} {"level":"info","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44ff4044a0a2cbd01f12552e7fa0ccfcb977e77a93613d92fd840a7899fe693d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c51b6fb534e76e8ffdf85855402d1cea4bc74f5a41996f3570ad89f47f9064f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c51b6fb534e76e8ffdf85855402d1cea4bc74f5a41996f3570ad89f47f9064f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44ff4044a0a2cbd01f12552e7fa0ccfcb977e77a93613d92fd840a7899fe693d"} {"level":"info","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c51b6fb534e76e8ffdf85855402d1cea4bc74f5a41996f3570ad89f47f9064f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44ff4044a0a2cbd01f12552e7fa0ccfcb977e77a93613d92fd840a7899fe693d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c51b6fb534e76e8ffdf85855402d1cea4bc74f5a41996f3570ad89f47f9064f2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c51b6fb534e76e8ffdf85855402d1cea4bc74f5a41996f3570ad89f47f9064f2"} {"level":"debug","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d38a65992046dff6eaee609994e2f9e3a8c63971c4c223e4e749382d25705ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d38a65992046dff6eaee609994e2f9e3a8c63971c4c223e4e749382d25705ff"} {"level":"info","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d38a65992046dff6eaee609994e2f9e3a8c63971c4c223e4e749382d25705ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d38a65992046dff6eaee609994e2f9e3a8c63971c4c223e4e749382d25705ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d38a65992046dff6eaee609994e2f9e3a8c63971c4c223e4e749382d25705ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d38a65992046dff6eaee609994e2f9e3a8c63971c4c223e4e749382d25705ff"} {"level":"info","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d38a65992046dff6eaee609994e2f9e3a8c63971c4c223e4e749382d25705ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d38a65992046dff6eaee609994e2f9e3a8c63971c4c223e4e749382d25705ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d38a65992046dff6eaee609994e2f9e3a8c63971c4c223e4e749382d25705ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6d38a65992046dff6eaee609994e2f9e3a8c63971c4c223e4e749382d25705ff","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6d38a65992046dff6eaee609994e2f9e3a8c63971c4c223e4e749382d25705ff\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d38a65992046dff6eaee609994e2f9e3a8c63971c4c223e4e749382d25705ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d38a65992046dff6eaee609994e2f9e3a8c63971c4c223e4e749382d25705ff"} {"level":"info","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d38a65992046dff6eaee609994e2f9e3a8c63971c4c223e4e749382d25705ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d38a65992046dff6eaee609994e2f9e3a8c63971c4c223e4e749382d25705ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d38a65992046dff6eaee609994e2f9e3a8c63971c4c223e4e749382d25705ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d38a65992046dff6eaee609994e2f9e3a8c63971c4c223e4e749382d25705ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d38a65992046dff6eaee609994e2f9e3a8c63971c4c223e4e749382d25705ff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d38a65992046dff6eaee609994e2f9e3a8c63971c4c223e4e749382d25705ff"} {"level":"debug","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d38a65992046dff6eaee609994e2f9e3a8c63971c4c223e4e749382d25705ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d38a65992046dff6eaee609994e2f9e3a8c63971c4c223e4e749382d25705ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d38a65992046dff6eaee609994e2f9e3a8c63971c4c223e4e749382d25705ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d38a65992046dff6eaee609994e2f9e3a8c63971c4c223e4e749382d25705ff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d38a65992046dff6eaee609994e2f9e3a8c63971c4c223e4e749382d25705ff"} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a"} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a"} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f1552cd555c6bbadcd8113b4e751e4216699fa9eb95250845ee557acf1a545e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a"} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f1552cd555c6bbadcd8113b4e751e4216699fa9eb95250845ee557acf1a545e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f1552cd555c6bbadcd8113b4e751e4216699fa9eb95250845ee557acf1a545e"} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f1552cd555c6bbadcd8113b4e751e4216699fa9eb95250845ee557acf1a545e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f1552cd555c6bbadcd8113b4e751e4216699fa9eb95250845ee557acf1a545e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a"} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f1552cd555c6bbadcd8113b4e751e4216699fa9eb95250845ee557acf1a545e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f1552cd555c6bbadcd8113b4e751e4216699fa9eb95250845ee557acf1a545e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f1552cd555c6bbadcd8113b4e751e4216699fa9eb95250845ee557acf1a545e"} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f1552cd555c6bbadcd8113b4e751e4216699fa9eb95250845ee557acf1a545e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f1552cd555c6bbadcd8113b4e751e4216699fa9eb95250845ee557acf1a545e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f1552cd555c6bbadcd8113b4e751e4216699fa9eb95250845ee557acf1a545e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a"} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f1552cd555c6bbadcd8113b4e751e4216699fa9eb95250845ee557acf1a545e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"090147dfd3d623a9ca9bc2940362e070221c18755a3876fff5bc929660bfea82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f1552cd555c6bbadcd8113b4e751e4216699fa9eb95250845ee557acf1a545e"} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"090147dfd3d623a9ca9bc2940362e070221c18755a3876fff5bc929660bfea82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f1552cd555c6bbadcd8113b4e751e4216699fa9eb95250845ee557acf1a545e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"090147dfd3d623a9ca9bc2940362e070221c18755a3876fff5bc929660bfea82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/090147dfd3d623a9ca9bc2940362e070221c18755a3876fff5bc929660bfea82"} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"090147dfd3d623a9ca9bc2940362e070221c18755a3876fff5bc929660bfea82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"090147dfd3d623a9ca9bc2940362e070221c18755a3876fff5bc929660bfea82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["090147dfd3d623a9ca9bc2940362e070221c18755a3876fff5bc929660bfea82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"090147dfd3d623a9ca9bc2940362e070221c18755a3876fff5bc929660bfea82","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"090147dfd3d623a9ca9bc2940362e070221c18755a3876fff5bc929660bfea82\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"090147dfd3d623a9ca9bc2940362e070221c18755a3876fff5bc929660bfea82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["090147dfd3d623a9ca9bc2940362e070221c18755a3876fff5bc929660bfea82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f1552cd555c6bbadcd8113b4e751e4216699fa9eb95250845ee557acf1a545e"} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"090147dfd3d623a9ca9bc2940362e070221c18755a3876fff5bc929660bfea82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"090147dfd3d623a9ca9bc2940362e070221c18755a3876fff5bc929660bfea82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"090147dfd3d623a9ca9bc2940362e070221c18755a3876fff5bc929660bfea82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/090147dfd3d623a9ca9bc2940362e070221c18755a3876fff5bc929660bfea82"} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"090147dfd3d623a9ca9bc2940362e070221c18755a3876fff5bc929660bfea82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54c01054f0816cd1e76ac345670b5e7cb0519d96138bca7409941f8e61cc22a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/090147dfd3d623a9ca9bc2940362e070221c18755a3876fff5bc929660bfea82"} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54c01054f0816cd1e76ac345670b5e7cb0519d96138bca7409941f8e61cc22a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"090147dfd3d623a9ca9bc2940362e070221c18755a3876fff5bc929660bfea82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["090147dfd3d623a9ca9bc2940362e070221c18755a3876fff5bc929660bfea82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54c01054f0816cd1e76ac345670b5e7cb0519d96138bca7409941f8e61cc22a9"} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"090147dfd3d623a9ca9bc2940362e070221c18755a3876fff5bc929660bfea82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54c01054f0816cd1e76ac345670b5e7cb0519d96138bca7409941f8e61cc22a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54c01054f0816cd1e76ac345670b5e7cb0519d96138bca7409941f8e61cc22a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/090147dfd3d623a9ca9bc2940362e070221c18755a3876fff5bc929660bfea82"} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54c01054f0816cd1e76ac345670b5e7cb0519d96138bca7409941f8e61cc22a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"090147dfd3d623a9ca9bc2940362e070221c18755a3876fff5bc929660bfea82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54c01054f0816cd1e76ac345670b5e7cb0519d96138bca7409941f8e61cc22a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54c01054f0816cd1e76ac345670b5e7cb0519d96138bca7409941f8e61cc22a9"} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54c01054f0816cd1e76ac345670b5e7cb0519d96138bca7409941f8e61cc22a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54c01054f0816cd1e76ac345670b5e7cb0519d96138bca7409941f8e61cc22a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54c01054f0816cd1e76ac345670b5e7cb0519d96138bca7409941f8e61cc22a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/090147dfd3d623a9ca9bc2940362e070221c18755a3876fff5bc929660bfea82"} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54c01054f0816cd1e76ac345670b5e7cb0519d96138bca7409941f8e61cc22a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54c01054f0816cd1e76ac345670b5e7cb0519d96138bca7409941f8e61cc22a9"} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54c01054f0816cd1e76ac345670b5e7cb0519d96138bca7409941f8e61cc22a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b"} {"level":"error","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54c01054f0816cd1e76ac345670b5e7cb0519d96138bca7409941f8e61cc22a9"} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b"} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b"} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b"} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b"} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b"} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b"} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b"} {"level":"debug","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b"} {"level":"debug","ts":"2026-07-02T19:44:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:44:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b"} {"level":"debug","ts":"2026-07-02T19:44:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:44:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b"} {"level":"debug","ts":"2026-07-02T19:44:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:44:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b"} {"level":"debug","ts":"2026-07-02T19:44:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:44:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b"} {"level":"debug","ts":"2026-07-02T19:44:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:44:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b"} {"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"} {"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"} {"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"} {"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac2a8954e7e88f4c0971264edcc2fec0357178441ce067b4b9f7121d3f472252","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"} {"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac2a8954e7e88f4c0971264edcc2fec0357178441ce067b4b9f7121d3f472252","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac2a8954e7e88f4c0971264edcc2fec0357178441ce067b4b9f7121d3f472252","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac2a8954e7e88f4c0971264edcc2fec0357178441ce067b4b9f7121d3f472252"} {"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac2a8954e7e88f4c0971264edcc2fec0357178441ce067b4b9f7121d3f472252","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"} {"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac2a8954e7e88f4c0971264edcc2fec0357178441ce067b4b9f7121d3f472252","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac2a8954e7e88f4c0971264edcc2fec0357178441ce067b4b9f7121d3f472252"} {"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac2a8954e7e88f4c0971264edcc2fec0357178441ce067b4b9f7121d3f472252","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac2a8954e7e88f4c0971264edcc2fec0357178441ce067b4b9f7121d3f472252"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"} {"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac2a8954e7e88f4c0971264edcc2fec0357178441ce067b4b9f7121d3f472252","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac2a8954e7e88f4c0971264edcc2fec0357178441ce067b4b9f7121d3f472252","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"} {"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac2a8954e7e88f4c0971264edcc2fec0357178441ce067b4b9f7121d3f472252"} {"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"} {"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"} {"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"} {"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"} {"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0"} {"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0"} {"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0"} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0"} {"level":"error","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b03771bf89dd639ce0e8d328c68d0acb6382aa2dd506f088e6b7074ed2f175b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b03771bf89dd639ce0e8d328c68d0acb6382aa2dd506f088e6b7074ed2f175b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b03771bf89dd639ce0e8d328c68d0acb6382aa2dd506f088e6b7074ed2f175b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b03771bf89dd639ce0e8d328c68d0acb6382aa2dd506f088e6b7074ed2f175b"} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b03771bf89dd639ce0e8d328c68d0acb6382aa2dd506f088e6b7074ed2f175b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b03771bf89dd639ce0e8d328c68d0acb6382aa2dd506f088e6b7074ed2f175b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b03771bf89dd639ce0e8d328c68d0acb6382aa2dd506f088e6b7074ed2f175b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b03771bf89dd639ce0e8d328c68d0acb6382aa2dd506f088e6b7074ed2f175b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b03771bf89dd639ce0e8d328c68d0acb6382aa2dd506f088e6b7074ed2f175b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b03771bf89dd639ce0e8d328c68d0acb6382aa2dd506f088e6b7074ed2f175b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3b03771bf89dd639ce0e8d328c68d0acb6382aa2dd506f088e6b7074ed2f175b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3b03771bf89dd639ce0e8d328c68d0acb6382aa2dd506f088e6b7074ed2f175b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b03771bf89dd639ce0e8d328c68d0acb6382aa2dd506f088e6b7074ed2f175b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93ecc94b6311de85f1049ad84683f5df603605cc382d097b0de63c05563a9558","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0"} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93ecc94b6311de85f1049ad84683f5df603605cc382d097b0de63c05563a9558","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b03771bf89dd639ce0e8d328c68d0acb6382aa2dd506f088e6b7074ed2f175b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93ecc94b6311de85f1049ad84683f5df603605cc382d097b0de63c05563a9558","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93ecc94b6311de85f1049ad84683f5df603605cc382d097b0de63c05563a9558","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93ecc94b6311de85f1049ad84683f5df603605cc382d097b0de63c05563a9558","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b03771bf89dd639ce0e8d328c68d0acb6382aa2dd506f088e6b7074ed2f175b"} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93ecc94b6311de85f1049ad84683f5df603605cc382d097b0de63c05563a9558"} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93ecc94b6311de85f1049ad84683f5df603605cc382d097b0de63c05563a9558","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93ecc94b6311de85f1049ad84683f5df603605cc382d097b0de63c05563a9558"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93ecc94b6311de85f1049ad84683f5df603605cc382d097b0de63c05563a9558","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93ecc94b6311de85f1049ad84683f5df603605cc382d097b0de63c05563a9558","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782"} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93ecc94b6311de85f1049ad84683f5df603605cc382d097b0de63c05563a9558"} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782"} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782"} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc"} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782"} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7"} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc"} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7"} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782"} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7"} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7"} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7"} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7"} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7"} {"level":"debug","ts":"2026-07-02T19:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"090147dfd3d623a9ca9bc2940362e070221c18755a3876fff5bc929660bfea82","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201"} {"level":"info","ts":"2026-07-02T19:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/090147dfd3d623a9ca9bc2940362e070221c18755a3876fff5bc929660bfea82"} {"level":"debug","ts":"2026-07-02T19:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:45:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:45:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a"} {"level":"debug","ts":"2026-07-02T19:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a"} {"level":"debug","ts":"2026-07-02T19:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:45:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:45:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef93b9e82af1d5de37dfc31e29a3e497351ad0345605a42708839748b02e907f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a"} {"level":"info","ts":"2026-07-02T19:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef93b9e82af1d5de37dfc31e29a3e497351ad0345605a42708839748b02e907f"} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc"} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc"} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc"} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4"} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc"} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc"} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc"} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc"} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc"} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b"} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b"} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc"} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93ecc94b6311de85f1049ad84683f5df603605cc382d097b0de63c05563a9558","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93ecc94b6311de85f1049ad84683f5df603605cc382d097b0de63c05563a9558","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93ecc94b6311de85f1049ad84683f5df603605cc382d097b0de63c05563a9558","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93ecc94b6311de85f1049ad84683f5df603605cc382d097b0de63c05563a9558","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93ecc94b6311de85f1049ad84683f5df603605cc382d097b0de63c05563a9558"} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93ecc94b6311de85f1049ad84683f5df603605cc382d097b0de63c05563a9558","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93ecc94b6311de85f1049ad84683f5df603605cc382d097b0de63c05563a9558"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93ecc94b6311de85f1049ad84683f5df603605cc382d097b0de63c05563a9558","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93ecc94b6311de85f1049ad84683f5df603605cc382d097b0de63c05563a9558","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54c01054f0816cd1e76ac345670b5e7cb0519d96138bca7409941f8e61cc22a9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b"} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93ecc94b6311de85f1049ad84683f5df603605cc382d097b0de63c05563a9558"} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54c01054f0816cd1e76ac345670b5e7cb0519d96138bca7409941f8e61cc22a9"} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac2a8954e7e88f4c0971264edcc2fec0357178441ce067b4b9f7121d3f472252","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b03771bf89dd639ce0e8d328c68d0acb6382aa2dd506f088e6b7074ed2f175b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac2a8954e7e88f4c0971264edcc2fec0357178441ce067b4b9f7121d3f472252"} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44ff4044a0a2cbd01f12552e7fa0ccfcb977e77a93613d92fd840a7899fe693d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b03771bf89dd639ce0e8d328c68d0acb6382aa2dd506f088e6b7074ed2f175b"} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44ff4044a0a2cbd01f12552e7fa0ccfcb977e77a93613d92fd840a7899fe693d"} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132"} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d38a65992046dff6eaee609994e2f9e3a8c63971c4c223e4e749382d25705ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0"} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132"} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c51b6fb534e76e8ffdf85855402d1cea4bc74f5a41996f3570ad89f47f9064f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d38a65992046dff6eaee609994e2f9e3a8c63971c4c223e4e749382d25705ff"} {"level":"error","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7"} {"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f1552cd555c6bbadcd8113b4e751e4216699fa9eb95250845ee557acf1a545e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c51b6fb534e76e8ffdf85855402d1cea4bc74f5a41996f3570ad89f47f9064f2"} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132"} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782"} {"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f1552cd555c6bbadcd8113b4e751e4216699fa9eb95250845ee557acf1a545e"} {"level":"info","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f4c826a-4ae9-4173-a176-13400188ef73","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47410","PortSpecifier":{"PortValue":47410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1f4c826a-4ae9-4173-a176-13400188ef73","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f4c826a-4ae9-4173-a176-13400188ef73","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47410","PortSpecifier":{"PortValue":47410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021520,"nanos":616906657},"http":{"id":"1f4c826a-4ae9-4173-a176-13400188ef73","method":"POST","headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1f4c826a-4ae9-4173-a176-13400188ef73","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1f4c826a-4ae9-4173-a176-13400188ef73","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"478a9049-7589-4443-b6b2-6a4e0000802d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"]}} {"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1f4c826a-4ae9-4173-a176-13400188ef73","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"478a9049-7589-4443-b6b2-6a4e0000802d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f4c826a-4ae9-4173-a176-13400188ef73","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f4c826a-4ae9-4173-a176-13400188ef73","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f4c826a-4ae9-4173-a176-13400188ef73","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1f4c826a-4ae9-4173-a176-13400188ef73","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f4c826a-4ae9-4173-a176-13400188ef73","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f4c826a-4ae9-4173-a176-13400188ef73","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f4c826a-4ae9-4173-a176-13400188ef73","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f4c826a-4ae9-4173-a176-13400188ef73","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c426e37-e6cb-4e17-8187-646a0b3e5220","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39138","PortSpecifier":{"PortValue":39138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4c426e37-e6cb-4e17-8187-646a0b3e5220","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c426e37-e6cb-4e17-8187-646a0b3e5220","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39138","PortSpecifier":{"PortValue":39138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021520,"nanos":659854504},"http":{"id":"4c426e37-e6cb-4e17-8187-646a0b3e5220","method":"POST","headers":{":authority":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4c426e37-e6cb-4e17-8187-646a0b3e5220","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4c426e37-e6cb-4e17-8187-646a0b3e5220","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"478a9049-7589-4443-b6b2-6a4e0000802d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"]}} {"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4c426e37-e6cb-4e17-8187-646a0b3e5220","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"478a9049-7589-4443-b6b2-6a4e0000802d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c426e37-e6cb-4e17-8187-646a0b3e5220","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c426e37-e6cb-4e17-8187-646a0b3e5220","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c426e37-e6cb-4e17-8187-646a0b3e5220","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f80343/rate-test-model-f80343\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4c426e37-e6cb-4e17-8187-646a0b3e5220","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c426e37-e6cb-4e17-8187-646a0b3e5220","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c426e37-e6cb-4e17-8187-646a0b3e5220","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c426e37-e6cb-4e17-8187-646a0b3e5220","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c426e37-e6cb-4e17-8187-646a0b3e5220","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62baafcf-40d8-461e-9dda-e5c92b4ce332","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47426","PortSpecifier":{"PortValue":47426}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"62baafcf-40d8-461e-9dda-e5c92b4ce332","method":"POST","path":"/ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a/v1/completions","host":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62baafcf-40d8-461e-9dda-e5c92b4ce332","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47426","PortSpecifier":{"PortValue":47426}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021520,"nanos":706605613},"http":{"id":"62baafcf-40d8-461e-9dda-e5c92b4ce332","method":"POST","headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"62baafcf-40d8-461e-9dda-e5c92b4ce332","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5Nvhwi5sVm9X54oB_USco6jd8Er3spezrJSzcuf63QwQNx6433JXkkfWgEni"} {"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"62baafcf-40d8-461e-9dda-e5c92b4ce332","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5Nvhwi5sVm9X54oB_USco6jd8Er3spezrJSzcuf63QwQNx6433JXkkfWgEni\"}"} {"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"62baafcf-40d8-461e-9dda-e5c92b4ce332","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ee99b81a-8191-451f-a61d-483409782383","keyName":"e2e-rate-a-c2e107","subscription":"e2e-rate-iso-a-c2e107","tenant":"e2e-shared-a-4a101a","userId":"ee99b81a-8191-451f-a61d-483409782383","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"62baafcf-40d8-461e-9dda-e5c92b4ce332","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a\",\"requestedSubscription\":\"e2e-rate-iso-a-c2e107\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"62baafcf-40d8-461e-9dda-e5c92b4ce332","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4a101a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c2e107","namespace":"ai-tenant-e2e-shared-a-4a101a","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"62baafcf-40d8-461e-9dda-e5c92b4ce332","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62baafcf-40d8-461e-9dda-e5c92b4ce332","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62baafcf-40d8-461e-9dda-e5c92b4ce332","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62baafcf-40d8-461e-9dda-e5c92b4ce332","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62baafcf-40d8-461e-9dda-e5c92b4ce332","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62baafcf-40d8-461e-9dda-e5c92b4ce332","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62baafcf-40d8-461e-9dda-e5c92b4ce332","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c2e107"} {"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62baafcf-40d8-461e-9dda-e5c92b4ce332","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62baafcf-40d8-461e-9dda-e5c92b4ce332","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ee99b81a-8191-451f-a61d-483409782383","keyName":"e2e-rate-a-c2e107","selected_subscription":"e2e-rate-iso-a-c2e107","selected_subscription_key":"ai-tenant-e2e-shared-a-4a101a/e2e-rate-iso-a-c2e107@ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4a101a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c2e107","namespace":"ai-tenant-e2e-shared-a-4a101a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62baafcf-40d8-461e-9dda-e5c92b4ce332","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62baafcf-40d8-461e-9dda-e5c92b4ce332","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:45:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca81eff1-1d24-4cdd-9305-7cef5578556e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47430","PortSpecifier":{"PortValue":47430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ca81eff1-1d24-4cdd-9305-7cef5578556e","method":"POST","path":"/ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a/v1/completions","host":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:45:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca81eff1-1d24-4cdd-9305-7cef5578556e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47430","PortSpecifier":{"PortValue":47430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021521,"nanos":771023615},"http":{"id":"ca81eff1-1d24-4cdd-9305-7cef5578556e","method":"POST","headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:45:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ca81eff1-1d24-4cdd-9305-7cef5578556e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5Nvhwi5sVm9X54oB_USco6jd8Er3spezrJSzcuf63QwQNx6433JXkkfWgEni"} {"level":"debug","ts":"2026-07-02T19:45:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ca81eff1-1d24-4cdd-9305-7cef5578556e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5Nvhwi5sVm9X54oB_USco6jd8Er3spezrJSzcuf63QwQNx6433JXkkfWgEni\"}"} {"level":"debug","ts":"2026-07-02T19:45:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ca81eff1-1d24-4cdd-9305-7cef5578556e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ee99b81a-8191-451f-a61d-483409782383","keyName":"e2e-rate-a-c2e107","subscription":"e2e-rate-iso-a-c2e107","tenant":"e2e-shared-a-4a101a","userId":"ee99b81a-8191-451f-a61d-483409782383","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-02T19:45:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ca81eff1-1d24-4cdd-9305-7cef5578556e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a\",\"requestedSubscription\":\"e2e-rate-iso-a-c2e107\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-02T19:45:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ca81eff1-1d24-4cdd-9305-7cef5578556e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4a101a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c2e107","namespace":"ai-tenant-e2e-shared-a-4a101a","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-02T19:45:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ca81eff1-1d24-4cdd-9305-7cef5578556e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:45:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca81eff1-1d24-4cdd-9305-7cef5578556e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:45:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca81eff1-1d24-4cdd-9305-7cef5578556e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:45:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca81eff1-1d24-4cdd-9305-7cef5578556e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:45:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca81eff1-1d24-4cdd-9305-7cef5578556e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:45:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca81eff1-1d24-4cdd-9305-7cef5578556e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-02T19:45:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca81eff1-1d24-4cdd-9305-7cef5578556e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-02T19:45:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca81eff1-1d24-4cdd-9305-7cef5578556e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c2e107"} {"level":"debug","ts":"2026-07-02T19:45:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca81eff1-1d24-4cdd-9305-7cef5578556e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ee99b81a-8191-451f-a61d-483409782383","keyName":"e2e-rate-a-c2e107","selected_subscription":"e2e-rate-iso-a-c2e107","selected_subscription_key":"ai-tenant-e2e-shared-a-4a101a/e2e-rate-iso-a-c2e107@ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4a101a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c2e107","namespace":"ai-tenant-e2e-shared-a-4a101a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-02T19:45:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca81eff1-1d24-4cdd-9305-7cef5578556e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:45:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca81eff1-1d24-4cdd-9305-7cef5578556e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:45:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c95c7526-8392-4fa3-a064-36fd218427c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47436","PortSpecifier":{"PortValue":47436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c95c7526-8392-4fa3-a064-36fd218427c2","method":"POST","path":"/ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a/v1/completions","host":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:45:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c95c7526-8392-4fa3-a064-36fd218427c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47436","PortSpecifier":{"PortValue":47436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021522,"nanos":806224975},"http":{"id":"c95c7526-8392-4fa3-a064-36fd218427c2","method":"POST","headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:45:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c95c7526-8392-4fa3-a064-36fd218427c2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5Nvhwi5sVm9X54oB_USco6jd8Er3spezrJSzcuf63QwQNx6433JXkkfWgEni"} {"level":"debug","ts":"2026-07-02T19:45:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c95c7526-8392-4fa3-a064-36fd218427c2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5Nvhwi5sVm9X54oB_USco6jd8Er3spezrJSzcuf63QwQNx6433JXkkfWgEni\"}"} {"level":"debug","ts":"2026-07-02T19:45:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c95c7526-8392-4fa3-a064-36fd218427c2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ee99b81a-8191-451f-a61d-483409782383","keyName":"e2e-rate-a-c2e107","subscription":"e2e-rate-iso-a-c2e107","tenant":"e2e-shared-a-4a101a","userId":"ee99b81a-8191-451f-a61d-483409782383","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-02T19:45:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c95c7526-8392-4fa3-a064-36fd218427c2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a\",\"requestedSubscription\":\"e2e-rate-iso-a-c2e107\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-02T19:45:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c95c7526-8392-4fa3-a064-36fd218427c2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4a101a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c2e107","namespace":"ai-tenant-e2e-shared-a-4a101a","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-02T19:45:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c95c7526-8392-4fa3-a064-36fd218427c2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:45:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c95c7526-8392-4fa3-a064-36fd218427c2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:45:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c95c7526-8392-4fa3-a064-36fd218427c2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:45:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c95c7526-8392-4fa3-a064-36fd218427c2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:45:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c95c7526-8392-4fa3-a064-36fd218427c2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:45:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c95c7526-8392-4fa3-a064-36fd218427c2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-02T19:45:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c95c7526-8392-4fa3-a064-36fd218427c2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c2e107"} {"level":"debug","ts":"2026-07-02T19:45:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c95c7526-8392-4fa3-a064-36fd218427c2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-02T19:45:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c95c7526-8392-4fa3-a064-36fd218427c2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ee99b81a-8191-451f-a61d-483409782383","keyName":"e2e-rate-a-c2e107","selected_subscription":"e2e-rate-iso-a-c2e107","selected_subscription_key":"ai-tenant-e2e-shared-a-4a101a/e2e-rate-iso-a-c2e107@ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4a101a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c2e107","namespace":"ai-tenant-e2e-shared-a-4a101a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-02T19:45:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c95c7526-8392-4fa3-a064-36fd218427c2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:45:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c95c7526-8392-4fa3-a064-36fd218427c2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39f310bb-6643-4187-a9f6-2e7e23e93689","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38778","PortSpecifier":{"PortValue":38778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"39f310bb-6643-4187-a9f6-2e7e23e93689","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39f310bb-6643-4187-a9f6-2e7e23e93689","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38778","PortSpecifier":{"PortValue":38778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021533,"nanos":552887825},"http":{"id":"39f310bb-6643-4187-a9f6-2e7e23e93689","method":"POST","headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"39f310bb-6643-4187-a9f6-2e7e23e93689","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"39f310bb-6643-4187-a9f6-2e7e23e93689","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"478a9049-7589-4443-b6b2-6a4e0000802d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"]}} {"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"39f310bb-6643-4187-a9f6-2e7e23e93689","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"478a9049-7589-4443-b6b2-6a4e0000802d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39f310bb-6643-4187-a9f6-2e7e23e93689","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39f310bb-6643-4187-a9f6-2e7e23e93689","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39f310bb-6643-4187-a9f6-2e7e23e93689","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"39f310bb-6643-4187-a9f6-2e7e23e93689","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39f310bb-6643-4187-a9f6-2e7e23e93689","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39f310bb-6643-4187-a9f6-2e7e23e93689","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39f310bb-6643-4187-a9f6-2e7e23e93689","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39f310bb-6643-4187-a9f6-2e7e23e93689","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bee1de7c-c613-432e-842b-867aca14b48d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:36924","PortSpecifier":{"PortValue":36924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bee1de7c-c613-432e-842b-867aca14b48d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bee1de7c-c613-432e-842b-867aca14b48d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:36924","PortSpecifier":{"PortValue":36924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021533,"nanos":593846677},"http":{"id":"bee1de7c-c613-432e-842b-867aca14b48d","method":"POST","headers":{":authority":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bee1de7c-c613-432e-842b-867aca14b48d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bee1de7c-c613-432e-842b-867aca14b48d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"478a9049-7589-4443-b6b2-6a4e0000802d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"]}} {"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bee1de7c-c613-432e-842b-867aca14b48d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"478a9049-7589-4443-b6b2-6a4e0000802d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bee1de7c-c613-432e-842b-867aca14b48d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bee1de7c-c613-432e-842b-867aca14b48d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bee1de7c-c613-432e-842b-867aca14b48d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f80343/rate-test-model-f80343\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bee1de7c-c613-432e-842b-867aca14b48d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bee1de7c-c613-432e-842b-867aca14b48d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bee1de7c-c613-432e-842b-867aca14b48d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bee1de7c-c613-432e-842b-867aca14b48d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bee1de7c-c613-432e-842b-867aca14b48d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4be58e63-b4cf-4508-ba2e-ad22635a10be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38780","PortSpecifier":{"PortValue":38780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4be58e63-b4cf-4508-ba2e-ad22635a10be","method":"POST","path":"/ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a/v1/completions","host":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4be58e63-b4cf-4508-ba2e-ad22635a10be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38780","PortSpecifier":{"PortValue":38780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021533,"nanos":633066634},"http":{"id":"4be58e63-b4cf-4508-ba2e-ad22635a10be","method":"POST","headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4be58e63-b4cf-4508-ba2e-ad22635a10be","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ScMFmPCfUizalaVE_CHAoFCHfQgt5f54HgN4Cxv1U8P4BdFGiHgH1pIv76wy"} {"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4be58e63-b4cf-4508-ba2e-ad22635a10be","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ScMFmPCfUizalaVE_CHAoFCHfQgt5f54HgN4Cxv1U8P4BdFGiHgH1pIv76wy\"}"} {"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4be58e63-b4cf-4508-ba2e-ad22635a10be","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"04ef27d5-d19f-42f0-8ce0-f3fd883e8f3e","keyName":"e2e-rate-a-8a145d","subscription":"e2e-rate-iso-a-8a145d","tenant":"e2e-shared-a-4a101a","userId":"04ef27d5-d19f-42f0-8ce0-f3fd883e8f3e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4be58e63-b4cf-4508-ba2e-ad22635a10be","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a\",\"requestedSubscription\":\"e2e-rate-iso-a-8a145d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4be58e63-b4cf-4508-ba2e-ad22635a10be","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4a101a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8a145d","namespace":"ai-tenant-e2e-shared-a-4a101a","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4be58e63-b4cf-4508-ba2e-ad22635a10be","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4be58e63-b4cf-4508-ba2e-ad22635a10be","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4be58e63-b4cf-4508-ba2e-ad22635a10be","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4be58e63-b4cf-4508-ba2e-ad22635a10be","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4be58e63-b4cf-4508-ba2e-ad22635a10be","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4be58e63-b4cf-4508-ba2e-ad22635a10be","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8a145d"} {"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4be58e63-b4cf-4508-ba2e-ad22635a10be","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4be58e63-b4cf-4508-ba2e-ad22635a10be","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4be58e63-b4cf-4508-ba2e-ad22635a10be","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"04ef27d5-d19f-42f0-8ce0-f3fd883e8f3e","keyName":"e2e-rate-a-8a145d","selected_subscription":"e2e-rate-iso-a-8a145d","selected_subscription_key":"ai-tenant-e2e-shared-a-4a101a/e2e-rate-iso-a-8a145d@ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4a101a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8a145d","namespace":"ai-tenant-e2e-shared-a-4a101a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4be58e63-b4cf-4508-ba2e-ad22635a10be","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4be58e63-b4cf-4508-ba2e-ad22635a10be","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:45:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31c15413-4ffd-4278-ad9d-d238d94044ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38784","PortSpecifier":{"PortValue":38784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"31c15413-4ffd-4278-ad9d-d238d94044ac","method":"POST","path":"/ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a/v1/completions","host":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:45:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31c15413-4ffd-4278-ad9d-d238d94044ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38784","PortSpecifier":{"PortValue":38784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021534,"nanos":672668278},"http":{"id":"31c15413-4ffd-4278-ad9d-d238d94044ac","method":"POST","headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:45:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"31c15413-4ffd-4278-ad9d-d238d94044ac","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ScMFmPCfUizalaVE_CHAoFCHfQgt5f54HgN4Cxv1U8P4BdFGiHgH1pIv76wy"} {"level":"debug","ts":"2026-07-02T19:45:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"31c15413-4ffd-4278-ad9d-d238d94044ac","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ScMFmPCfUizalaVE_CHAoFCHfQgt5f54HgN4Cxv1U8P4BdFGiHgH1pIv76wy\"}"} {"level":"debug","ts":"2026-07-02T19:45:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"31c15413-4ffd-4278-ad9d-d238d94044ac","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"04ef27d5-d19f-42f0-8ce0-f3fd883e8f3e","keyName":"e2e-rate-a-8a145d","subscription":"e2e-rate-iso-a-8a145d","tenant":"e2e-shared-a-4a101a","userId":"04ef27d5-d19f-42f0-8ce0-f3fd883e8f3e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-02T19:45:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"31c15413-4ffd-4278-ad9d-d238d94044ac","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a\",\"requestedSubscription\":\"e2e-rate-iso-a-8a145d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-02T19:45:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"31c15413-4ffd-4278-ad9d-d238d94044ac","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4a101a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8a145d","namespace":"ai-tenant-e2e-shared-a-4a101a","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-02T19:45:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"31c15413-4ffd-4278-ad9d-d238d94044ac","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:45:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31c15413-4ffd-4278-ad9d-d238d94044ac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:45:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31c15413-4ffd-4278-ad9d-d238d94044ac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:45:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31c15413-4ffd-4278-ad9d-d238d94044ac","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:45:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31c15413-4ffd-4278-ad9d-d238d94044ac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:45:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31c15413-4ffd-4278-ad9d-d238d94044ac","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-02T19:45:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31c15413-4ffd-4278-ad9d-d238d94044ac","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8a145d"} {"level":"debug","ts":"2026-07-02T19:45:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31c15413-4ffd-4278-ad9d-d238d94044ac","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-02T19:45:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31c15413-4ffd-4278-ad9d-d238d94044ac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"04ef27d5-d19f-42f0-8ce0-f3fd883e8f3e","keyName":"e2e-rate-a-8a145d","selected_subscription":"e2e-rate-iso-a-8a145d","selected_subscription_key":"ai-tenant-e2e-shared-a-4a101a/e2e-rate-iso-a-8a145d@ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4a101a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8a145d","namespace":"ai-tenant-e2e-shared-a-4a101a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-02T19:45:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31c15413-4ffd-4278-ad9d-d238d94044ac","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:45:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31c15413-4ffd-4278-ad9d-d238d94044ac","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d6cc136-d4f4-4911-8954-d1d1aa4c32fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38788","PortSpecifier":{"PortValue":38788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6d6cc136-d4f4-4911-8954-d1d1aa4c32fe","method":"POST","path":"/ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a/v1/completions","host":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d6cc136-d4f4-4911-8954-d1d1aa4c32fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38788","PortSpecifier":{"PortValue":38788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021535,"nanos":709141175},"http":{"id":"6d6cc136-d4f4-4911-8954-d1d1aa4c32fe","method":"POST","headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6d6cc136-d4f4-4911-8954-d1d1aa4c32fe","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ScMFmPCfUizalaVE_CHAoFCHfQgt5f54HgN4Cxv1U8P4BdFGiHgH1pIv76wy"} {"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6d6cc136-d4f4-4911-8954-d1d1aa4c32fe","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ScMFmPCfUizalaVE_CHAoFCHfQgt5f54HgN4Cxv1U8P4BdFGiHgH1pIv76wy\"}"} {"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6d6cc136-d4f4-4911-8954-d1d1aa4c32fe","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"04ef27d5-d19f-42f0-8ce0-f3fd883e8f3e","keyName":"e2e-rate-a-8a145d","subscription":"e2e-rate-iso-a-8a145d","tenant":"e2e-shared-a-4a101a","userId":"04ef27d5-d19f-42f0-8ce0-f3fd883e8f3e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6d6cc136-d4f4-4911-8954-d1d1aa4c32fe","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a\",\"requestedSubscription\":\"e2e-rate-iso-a-8a145d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6d6cc136-d4f4-4911-8954-d1d1aa4c32fe","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4a101a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8a145d","namespace":"ai-tenant-e2e-shared-a-4a101a","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6d6cc136-d4f4-4911-8954-d1d1aa4c32fe","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d6cc136-d4f4-4911-8954-d1d1aa4c32fe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d6cc136-d4f4-4911-8954-d1d1aa4c32fe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d6cc136-d4f4-4911-8954-d1d1aa4c32fe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d6cc136-d4f4-4911-8954-d1d1aa4c32fe","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d6cc136-d4f4-4911-8954-d1d1aa4c32fe","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d6cc136-d4f4-4911-8954-d1d1aa4c32fe","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d6cc136-d4f4-4911-8954-d1d1aa4c32fe","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8a145d"} {"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d6cc136-d4f4-4911-8954-d1d1aa4c32fe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"04ef27d5-d19f-42f0-8ce0-f3fd883e8f3e","keyName":"e2e-rate-a-8a145d","selected_subscription":"e2e-rate-iso-a-8a145d","selected_subscription_key":"ai-tenant-e2e-shared-a-4a101a/e2e-rate-iso-a-8a145d@ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4a101a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8a145d","namespace":"ai-tenant-e2e-shared-a-4a101a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d6cc136-d4f4-4911-8954-d1d1aa4c32fe","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d6cc136-d4f4-4911-8954-d1d1aa4c32fe","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"472f88f0-5ba7-48d4-ad17-dc67f58021e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:36926","PortSpecifier":{"PortValue":36926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"472f88f0-5ba7-48d4-ad17-dc67f58021e7","method":"POST","path":"/ai-tenant-e2e-shared-b-f80343/rate-test-model-f80343/v1/completions","host":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"472f88f0-5ba7-48d4-ad17-dc67f58021e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:36926","PortSpecifier":{"PortValue":36926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021535,"nanos":742398677},"http":{"id":"472f88f0-5ba7-48d4-ad17-dc67f58021e7","method":"POST","headers":{":authority":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-f80343/rate-test-model-f80343/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"472f88f0-5ba7-48d4-ad17-dc67f58021e7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Kv0PPNTnRQffUXax_abfiP2w2lWChsdUeo6TMFsEi2GxVqPIgwPyIYk5nNfX"} {"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"472f88f0-5ba7-48d4-ad17-dc67f58021e7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f80343.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Kv0PPNTnRQffUXax_abfiP2w2lWChsdUeo6TMFsEi2GxVqPIgwPyIYk5nNfX\"}"} {"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"472f88f0-5ba7-48d4-ad17-dc67f58021e7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f80343.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a6838eb5-b242-47f5-b57b-33eee0c6048d","keyName":"e2e-rate-b-8a145d","subscription":"e2e-rate-iso-b-8a145d","tenant":"e2e-shared-b-f80343","userId":"a6838eb5-b242-47f5-b57b-33eee0c6048d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"472f88f0-5ba7-48d4-ad17-dc67f58021e7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-f80343.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-f80343/rate-test-model-f80343\",\"requestedSubscription\":\"e2e-rate-iso-b-8a145d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"472f88f0-5ba7-48d4-ad17-dc67f58021e7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f80343.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f80343","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-8a145d","namespace":"ai-tenant-e2e-shared-b-f80343","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"472f88f0-5ba7-48d4-ad17-dc67f58021e7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"472f88f0-5ba7-48d4-ad17-dc67f58021e7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"472f88f0-5ba7-48d4-ad17-dc67f58021e7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"472f88f0-5ba7-48d4-ad17-dc67f58021e7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"472f88f0-5ba7-48d4-ad17-dc67f58021e7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f80343/rate-test-model-f80343\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"472f88f0-5ba7-48d4-ad17-dc67f58021e7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-8a145d"} {"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"472f88f0-5ba7-48d4-ad17-dc67f58021e7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"472f88f0-5ba7-48d4-ad17-dc67f58021e7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"472f88f0-5ba7-48d4-ad17-dc67f58021e7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a6838eb5-b242-47f5-b57b-33eee0c6048d","keyName":"e2e-rate-b-8a145d","selected_subscription":"e2e-rate-iso-b-8a145d","selected_subscription_key":"ai-tenant-e2e-shared-b-f80343/e2e-rate-iso-b-8a145d@ai-tenant-e2e-shared-b-f80343/rate-test-model-f80343","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f80343","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-8a145d","namespace":"ai-tenant-e2e-shared-b-f80343","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"472f88f0-5ba7-48d4-ad17-dc67f58021e7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"472f88f0-5ba7-48d4-ad17-dc67f58021e7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:45:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b03771bf89dd639ce0e8d328c68d0acb6382aa2dd506f088e6b7074ed2f175b"} {"level":"info","ts":"2026-07-02T19:45:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4"} {"level":"info","ts":"2026-07-02T19:45:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b"} {"level":"info","ts":"2026-07-02T19:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c51b6fb534e76e8ffdf85855402d1cea4bc74f5a41996f3570ad89f47f9064f2"} {"level":"info","ts":"2026-07-02T19:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7"} {"level":"info","ts":"2026-07-02T19:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/090147dfd3d623a9ca9bc2940362e070221c18755a3876fff5bc929660bfea82"} {"level":"info","ts":"2026-07-02T19:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f1552cd555c6bbadcd8113b4e751e4216699fa9eb95250845ee557acf1a545e"} {"level":"info","ts":"2026-07-02T19:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782"} {"level":"info","ts":"2026-07-02T19:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93ecc94b6311de85f1049ad84683f5df603605cc382d097b0de63c05563a9558"} {"level":"info","ts":"2026-07-02T19:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/44ff4044a0a2cbd01f12552e7fa0ccfcb977e77a93613d92fd840a7899fe693d"} {"level":"info","ts":"2026-07-02T19:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac2a8954e7e88f4c0971264edcc2fec0357178441ce067b4b9f7121d3f472252"} {"level":"info","ts":"2026-07-02T19:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54c01054f0816cd1e76ac345670b5e7cb0519d96138bca7409941f8e61cc22a9"} {"level":"info","ts":"2026-07-02T19:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"} {"level":"info","ts":"2026-07-02T19:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef93b9e82af1d5de37dfc31e29a3e497351ad0345605a42708839748b02e907f"} {"level":"info","ts":"2026-07-02T19:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc"} {"level":"info","ts":"2026-07-02T19:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a"} {"level":"info","ts":"2026-07-02T19:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0"} {"level":"info","ts":"2026-07-02T19:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d38a65992046dff6eaee609994e2f9e3a8c63971c4c223e4e749382d25705ff"} {"level":"info","ts":"2026-07-02T19:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132"} {"level":"info","ts":"2026-07-02T19:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201"}